diff --git a/sepolicy/vendor/init.te b/sepolicy/vendor/init.te
index 268251f8..d57bf8e5 100644
--- a/sepolicy/vendor/init.te
+++ b/sepolicy/vendor/init.te
@@ -29,3 +29,5 @@ allow init {
 }:file mounton;
 
 allow init hal_fingerprint_sdm660:process ptrace;
+allow init per_boot_file:file ioctl;
+allowxperm init per_boot_file:file ioctl { F2FS_IOC_SET_PIN_FILE };