diff --git a/public/vold.te b/public/vold.te
index f85e2c9..a2ddb05 100644
--- a/public/vold.te
+++ b/public/vold.te
@@ -166,6 +166,9 @@
 # talk to keymaster
 hal_client_domain(vold, hal_keymaster)
 
+# talk to health filesystem HAL
+hal_client_domain(vold, hal_health_filesystem)
+
 # Access userdata block device.
 allow vold userdata_block_device:blk_file rw_file_perms;
 
@@ -266,6 +269,7 @@
 neverallow vold {
   domain
   -hal_keymaster_server
+  -hal_health_filesystem_server
   -healthd
   -hwservicemanager
   -servicemanager