diff --git a/private/keystore.te b/private/keystore.te
index 8e681b1..3b4cc37 100644
--- a/private/keystore.te
+++ b/private/keystore.te
@@ -37,3 +37,6 @@
 # system property, an exception is added for init as well.
 set_prop(keystore, keystore_crash_prop)
 neverallow { domain -keystore -init } keystore_crash_prop:property_service set;
+
+# keystore is using apex_info via libvintf
+use_apex_info(keystore)