diff --git a/public/mediaextractor.te b/public/mediaextractor.te
index e86becf6f9abfbfc30a9b7e2800ab4edd0e542a7..4edab558f46928b7d62076f38f55e2ea24b856e1 100644
--- a/public/mediaextractor.te
+++ b/public/mediaextractor.te
@@ -16,6 +16,7 @@ allow mediaextractor hidl_token_hwservice:hwservice_manager find;
 allow mediaextractor system_server:fd use;
 
 hal_client_domain(mediaextractor, hal_cas)
+hal_client_domain(mediaextractor, hal_allocator)
 
 r_dir_file(mediaextractor, cgroup)
 allow mediaextractor proc_meminfo:file r_file_perms;
diff --git a/vendor/hal_cas_default.te b/vendor/hal_cas_default.te
index fc548bf9141a5d8564cb69b26d55ee265a2645f1..cc1a2c8ab3797465c1345bc12c818d5012f1f1e9 100644
--- a/vendor/hal_cas_default.te
+++ b/vendor/hal_cas_default.te
@@ -6,3 +6,5 @@ init_daemon_domain(hal_cas_default)
 
 # Allow CAS HAL's default implementation to use vendor-binder service
 vndbinder_use(hal_cas_default);
+
+allow hal_cas_default hal_allocator:fd use;