diff --git a/non_plat/hal_bootctl_default.te b/non_plat/hal_bootctl_default.te
index 8b1b261..e99f10d 100644
--- a/non_plat/hal_bootctl_default.te
+++ b/non_plat/hal_bootctl_default.te
@@ -7,3 +7,6 @@ allow hal_bootctl_default block_device:dir search;
 allow hal_bootctl_default misc_sd_device:chr_file rw_file_perms;
 allow hal_bootctl_default bootdevice_block_device:blk_file { read write ioctl open };
 allow hal_bootctl_default proc_cmdline:file r_file_perms;
+userdebug_or_eng(`
+allow hal_bootctl_default self:capability sys_rawio;
+')