diff --git a/private/app.te b/private/app.te
index 1b1f4ca0abc0008cff6234812871b53aaf794c84..04be106f3cf2a5d084828be88254c6c090918d00 100644
--- a/private/app.te
+++ b/private/app.te
@@ -246,6 +246,9 @@ auditallow { appdomain userdebug_or_eng(`-su') } ion_device:chr_file { write app
 # Allow app to access the graphic allocator HAL
 binder_call({ appdomain -isolated_app }, hal_graphics_allocator)
 
+# App can access configstore HAL which is read only
+binder_call({ appdomain -isolated_app }, hal_configstore)
+
 # Allow app to access shared memory created by camera HAL1
 allow { appdomain -isolated_app } hal_camera:fd use;