diff --git a/non_plat/vendor_init.te b/non_plat/vendor_init.te
index 7ae8d15..5b37552 100644
--- a/non_plat/vendor_init.te
+++ b/non_plat/vendor_init.te
@@ -63,3 +63,6 @@ set_prop(vendor_init, mtk_fullscreenswitch_prop)
 
 # for kernel module verification support, allow vendor domain to search kernel keyring
 allow vendor_init kernel:key search;
+
+# Purpose: /dev/block/mmcblk0p10
+allow vendor_init expdb_block_device:blk_file rw_file_perms;