diff --git a/non_plat/file.te b/non_plat/file.te
index 0ecd67a..6d2003b 100644
--- a/non_plat/file.te
+++ b/non_plat/file.te
@@ -264,3 +264,6 @@ type sysfs_uart_info, fs_type, sysfs_type;
 # Purpose : for charger to access vbus info and pump_express
 type sysfs_vbus, fs_type, sysfs_type;
 type sysfs_pump_express, fs_type, sysfs_type;
+
+# Widevine move data/mediadrm folder from system to vendor
+type mediadrm_vendor_data_file, file_type, data_file_type;
diff --git a/non_plat/file_contexts b/non_plat/file_contexts
index 68267c6..67c5b27 100644
--- a/non_plat/file_contexts
+++ b/non_plat/file_contexts
@@ -62,6 +62,7 @@
 #/data/vendor/nfc(/.*)? u:object_r:nfc_data_file:s0
 /data/vendor/connsyslog(/.*)?  u:object_r:consyslog_data_file:s0
 /data/vendor/stp_dump(/.*)? u:object_r:stp_dump_data_file:s0
+/data/vendor/mediadrm(/.*)?      u:object_r:mediadrm_vendor_data_file:s0
 
 # Misc data
 #/data/misc/acdapi(/.*)? u:object_r:acdapi_data_file:s0
@@ -558,7 +559,7 @@
 /(system\/vendor|vendor)/bin/hw/camerahalserver u:object_r:mtk_hal_camera_exec:s0
 /(system\/vendor|vendor)/bin/hw/vendor\.mediatek\.hardware\.imsa@1\.0-service u:object_r:mtk_hal_imsa_exec:s0
 #Widevine drm hal
-/(vendor|system/vendor)/bin/hw/android\.hardware\.drm@1\.0-service.widevine           u:object_r:hal_drm_widevine_exec:s0
+/(vendor|system/vendor)/bin/hw/android\.hardware\.drm@1\.1-service.widevine           u:object_r:hal_drm_widevine_exec:s0
 #PQ hal
 /(system\/vendor|vendor)/bin/hw/vendor\.mediatek\.hardware\.pq@2\.1-service u:object_r:mtk_hal_pq_exec:s0
 # Keymaster Attestation Hal
diff --git a/non_plat/hal_drm_widevine.te b/non_plat/hal_drm_widevine.te
index f49a823..261b156 100644
--- a/non_plat/hal_drm_widevine.te
+++ b/non_plat/hal_drm_widevine.te
@@ -9,6 +9,9 @@ allow hal_drm_widevine { appdomain -isolated_app }:fd use;
 
 vndbinder_use(hal_drm_widevine);
 
-#============= hal_drm_widevine ==============
 allow hal_drm_widevine debugfs_tracing:file write;
 allow hal_drm_widevine debugfs_ion:dir search;
+
+allow hal_drm_default hal_allocator_server:fd use;
+allow hal_drm_widevine mediadrm_vendor_data_file:dir create_dir_perms;
+allow hal_drm_widevine mediadrm_vendor_data_file:file create_file_perms;