diff --git a/sepolicy/vendor/untrusted_app.te b/sepolicy/vendor/untrusted_app.te
new file mode 100644
index 0000000..b59d301
--- /dev/null
+++ b/sepolicy/vendor/untrusted_app.te
@@ -0,0 +1,3 @@
+# allow apps to read battery status
+r_dir_file(untrusted_app, sysfs_battery_supply)
+r_dir_file(untrusted_app, sysfs_usb_supply)