diff --git a/vendor/file.te b/vendor/file.te
index 50238acb0c9193b5046b794c65822405b8e6b829..0b1fd748091cec385ddb879528ca08efe973048d 100644
--- a/vendor/file.te
+++ b/vendor/file.te
@@ -1,2 +1,2 @@
-# Hostapd conf files
 type hostapd_data_file, file_type, data_file_type;
+type wpa_data_file, file_type, data_file_type;
diff --git a/vendor/file_contexts b/vendor/file_contexts
index 77b6d6529e0ae5f9a9b2fced9395ba2112af7864..756c57f92c16f6d15be1627b079c8a6bcfcfe7b8 100644
--- a/vendor/file_contexts
+++ b/vendor/file_contexts
@@ -54,3 +54,4 @@
 # Data files
 #
 /data/vendor/wifi/hostapd(/.*)?                                               u:object_r:hostapd_data_file:s0
+/data/vendor/wifi/wpa(/.*)?                                                   u:object_r:wpa_data_file:s0
diff --git a/vendor/hal_wifi_supplicant_default.te b/vendor/hal_wifi_supplicant_default.te
index 8d7069c964072d454bd70341a94d24bc6a479371..e078a3f043c2b51be8e6b6b89fd655d272b01e4d 100644
--- a/vendor/hal_wifi_supplicant_default.te
+++ b/vendor/hal_wifi_supplicant_default.te
@@ -12,3 +12,7 @@ type_transition hal_wifi_supplicant_default wifi_data_file:dir wpa_socket "socke
 hwbinder_use(hal_wifi_supplicant_default)
 allow hal_wifi_supplicant_default system_wifi_keystore_hwservice:hwservice_manager find;
 binder_call(hal_wifi_supplicant_default, wifi_keystore_service_server)
+
+allow hal_wifi_supplicant_default wpa_data_file:dir create_dir_perms;
+allow hal_wifi_supplicant_default wpa_data_file:file create_file_perms;
+allow hal_wifi_supplicant_default wpa_data_file:sock_file create_file_perms;