diff --git a/device.te b/device.te
index adee1d7..788d9cb 100644
--- a/device.te
+++ b/device.te
@@ -67,3 +67,9 @@
 
 # factory reset protection block device
 type frp_block_device, dev_type;
+
+# Userdata block device mounted on /data.
+type userdata_block_device, dev_type;
+
+# Cache block device mounted on /cache.
+type cache_block_device, dev_type;
diff --git a/uncrypt.te b/uncrypt.te
index 265a8b1..1c18064 100644
--- a/uncrypt.te
+++ b/uncrypt.te
@@ -28,3 +28,7 @@
 allow uncrypt self:capability sys_rawio;
 allow uncrypt block_device:blk_file w_file_perms;
 allow uncrypt block_device:dir r_dir_perms;
+
+# Access userdata block device.
+allow uncrypt userdata_block_device:blk_file rw_file_perms;
+auditallow uncrypt userdata_block_device:blk_file rw_file_perms;
diff --git a/vold.te b/vold.te
index 0247bfe..6200896 100644
--- a/vold.te
+++ b/vold.te
@@ -89,3 +89,6 @@
 # talk to keymaster
 allow vold tee_device:chr_file rw_file_perms;
 
+# Access userdata block device.
+allow vold userdata_block_device:blk_file rw_file_perms;
+auditallow vold userdata_block_device:blk_file rw_file_perms;