diff --git a/plat_private/drmserver.te b/plat_private/drmserver.te
index 7c727e8..425240f 100644
--- a/plat_private/drmserver.te
+++ b/plat_private/drmserver.te
@@ -3,4 +3,4 @@
 # ======================
 
 # =======drmserver======
-#allow drmserver sysfs:file { read open };
+allow drmserver access_sys_file:file { read open };
diff --git a/plat_private/file.te b/plat_private/file.te
new file mode 100755
index 0000000..e1d7a89
--- /dev/null
+++ b/plat_private/file.te
@@ -0,0 +1,6 @@
+# ==============================================
+# MTK Policy Rule
+# ==============================================
+
+# For drmserver
+type access_sys_file, fs_type, sysfs_type;
\ No newline at end of file
diff --git a/plat_private/file_contexts b/plat_private/file_contexts
index a529be8..3e46099 100644
--- a/plat_private/file_contexts
+++ b/plat_private/file_contexts
@@ -44,3 +44,5 @@
 
 #MTK vibrator
 /sys/devices/platform/vibrator@0/leds/vibrator(/.*)? u:object_r:sysfs_vibrator:s0
+
+/sys/block/mmcblk0rpmb/size u:object_r:access_sys_file:s0