diff --git a/private/compat/28.0/28.0.ignore.cil b/private/compat/28.0/28.0.ignore.cil
index d0c81e4ff7f1c89b52a5dc3ccfd9468c491da71d..1b07debc04b8a4bd3d2f3dd01516c3143f7049f0 100644
--- a/private/compat/28.0/28.0.ignore.cil
+++ b/private/compat/28.0/28.0.ignore.cil
@@ -62,6 +62,7 @@
     mediaswcodec_tmpfs
     mnt_product_file
     overlayfs_file
+    permissionmgr_service
     recovery_socket
     role_service
     rss_hwm_reset
diff --git a/private/service_contexts b/private/service_contexts
index 1a9be8cba529ae24a89b2264354880b2772604e0..9fe7855922801d76a940f6e9bbe79c30a3de7baa 100644
--- a/private/service_contexts
+++ b/private/service_contexts
@@ -129,6 +129,7 @@ package                                   u:object_r:package_service:s0
 package_native                            u:object_r:package_native_service:s0
 perfprofd                                 u:object_r:perfprofd_service:s0
 permission                                u:object_r:permission_service:s0
+permissionmgr                             u:object_r:permissionmgr_service:s0
 persistent_data_block                     u:object_r:persistent_data_block_service:s0
 phone_msim                                u:object_r:radio_service:s0
 phone1                                    u:object_r:radio_service:s0
diff --git a/public/service.te b/public/service.te
index 3844bfab9a2f67704dd3b1f7039a6f50fe9edcd9..c244c0c493d7738420e28ede88318b323d2e6f60 100644
--- a/public/service.te
+++ b/public/service.te
@@ -125,6 +125,7 @@ type overlay_service, system_api_service, system_server_service, service_manager
 type package_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type;
 type package_native_service, system_server_service, service_manager_type;
 type permission_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type;
+type permissionmgr_service, system_server_service, service_manager_type;
 type persistent_data_block_service, system_api_service, system_server_service, service_manager_type;
 type pinner_service, system_server_service, service_manager_type;
 type power_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type;