diff --git a/sepolicy/vendor/radio.te b/sepolicy/vendor/radio.te
index 9b5f49fc..9872bca7 100644
--- a/sepolicy/vendor/radio.te
+++ b/sepolicy/vendor/radio.te
@@ -3,5 +3,6 @@ binder_call(radio, hal_imsrtp)
 
 allow radio { hal_datafactory_hwservice hal_iwlan_hwservice }:hwservice_manager find;
 allow radio hal_iwlan_hwservice:hwservice_manager find;
+allow radio zygote:unix_stream_socket getopt;
 
 get_prop(radio, vendor_qcom_ims_prop)
diff --git a/sepolicy/vendor/shell.te b/sepolicy/vendor/shell.te
new file mode 100644
index 00000000..b70916cb
--- /dev/null
+++ b/sepolicy/vendor/shell.te
@@ -0,0 +1 @@
+allow shell zygote:unix_stream_socket getopt;
diff --git a/sepolicy/vendor/traceur_app.te b/sepolicy/vendor/traceur_app.te
new file mode 100644
index 00000000..e0b427e8
--- /dev/null
+++ b/sepolicy/vendor/traceur_app.te
@@ -0,0 +1 @@
+allow traceur_app zygote:unix_stream_socket getopt;
diff --git a/sepolicy/vendor/vendor_qtetelephony.te b/sepolicy/vendor/vendor_qtetelephony.te
new file mode 100644
index 00000000..3bb80d21
--- /dev/null
+++ b/sepolicy/vendor/vendor_qtetelephony.te
@@ -0,0 +1 @@
+allow vendor_qtelephony zygote:unix_stream_socket getopt;