diff --git a/private/system_app.te b/private/system_app.te
index e5d7d18..9e25696 100644
--- a/private/system_app.te
+++ b/private/system_app.te
@@ -78,6 +78,9 @@
 # Allow system apps to interact with gpuservice
 binder_call(system_app, gpuservice)
 
+# Allow system app to interact with Dumpstate HAL
+hal_client_domain(system_app, hal_dumpstate)
+
 allow system_app servicemanager:service_manager list;
 # TODO: scope this down? Too broad?
 allow system_app {