diff --git a/private/init.te b/private/init.te
index 453e8a4..1f7ce25 100644
--- a/private/init.te
+++ b/private/init.te
@@ -66,3 +66,9 @@
 
 # Only init can write normal ro.boot. properties
 neverallow { -init } bootloader_prop:property_service set;
+
+# Only init can write hal.instrumentation.enable
+neverallow { -init } hal_instrumentation_prop:property_service set;
+
+# Only init can write ro.property_service.version
+neverallow { -init } property_service_version_prop:property_service set;