diff --git a/private/compat/28.0/28.0.ignore.cil b/private/compat/28.0/28.0.ignore.cil
index 9d3ad2e7b6e24818d2ea2321e8d612183c719dc8..7e1993cce84732f330aadc46a928636aad8135b4 100644
--- a/private/compat/28.0/28.0.ignore.cil
+++ b/private/compat/28.0/28.0.ignore.cil
@@ -18,6 +18,7 @@
     apexd_tmpfs
     biometric_service
     device_config_boot_count_prop
+    face_service
     fastbootd
     flags_health_check
     flags_health_check_exec
@@ -33,6 +34,7 @@
     heapprofd_exec
     heapprofd_socket
     intelligence_service
+    iris_service
     llkd
     llkd_exec
     llkd_prop
diff --git a/private/service_contexts b/private/service_contexts
index 71741e210c3eac0e07686fa3f28c73d7a454e084..458c43abea61390fc6ebddb9ffe080b3adad36cd 100644
--- a/private/service_contexts
+++ b/private/service_contexts
@@ -56,6 +56,7 @@ econtroller                               u:object_r:radio_service:s0
 euicc_card_controller                     u:object_r:radio_service:s0
 lowpan                                    u:object_r:lowpan_service:s0
 ethernet                                  u:object_r:ethernet_service:s0
+face                                      u:object_r:face_service:s0
 fingerprint                               u:object_r:fingerprint_service:s0
 font                                      u:object_r:font_service:s0
 android.hardware.fingerprint.IFingerprintDaemon u:object_r:fingerprintd_service:s0
@@ -79,6 +80,7 @@ ims                                       u:object_r:radio_service:s0
 imms                                      u:object_r:imms_service:s0
 intelligence                              u:object_r:intelligence_service:s0
 ipsec                                     u:object_r:ipsec_service:s0
+iris                                      u:object_r:iris_service:s0
 isms_msim                                 u:object_r:radio_service:s0
 isms2                                     u:object_r:radio_service:s0
 isms                                      u:object_r:radio_service:s0
diff --git a/public/service.te b/public/service.te
index 997b709eb5f31e20c6d7829fdd1c252b1c4a60ec..0ea76382a7bda75755bc11eb491db4a7bbb09b4f 100644
--- a/public/service.te
+++ b/public/service.te
@@ -87,6 +87,7 @@ type dropbox_service, app_api_service, ephemeral_app_api_service, system_server_
 type lowpan_service, system_api_service, system_server_service, service_manager_type;
 type ethernet_service, app_api_service, system_server_service, service_manager_type;
 type biometric_service, app_api_service, system_server_service, service_manager_type;
+type face_service, app_api_service, system_server_service, service_manager_type;
 type fingerprint_service, app_api_service, system_server_service, service_manager_type;
 type gfxinfo_service, system_api_service, system_server_service, service_manager_type;
 type graphicsstats_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type;
@@ -98,6 +99,7 @@ type input_method_service, app_api_service, ephemeral_app_api_service, system_se
 type input_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type;
 type intelligence_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type;
 type ipsec_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type;
+type iris_service, app_api_service, system_server_service, service_manager_type;
 type jobscheduler_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type;
 type launcherapps_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type;
 type location_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type;