diff --git a/sepolicy/bluetooth_loader.te b/sepolicy/bluetooth_loader.te
index d867e05..e54520d 100644
--- a/sepolicy/bluetooth_loader.te
+++ b/sepolicy/bluetooth_loader.te
@@ -18,12 +18,15 @@
 
 # Read mac address from persist partition
 allow bluetooth_loader persist_file:dir search;
+allow bluetooth_loader efs_file:dir search;
+allow bluetooth_loader bluetooth_efs_file:dir search;
+allow bluetooth_loader bluetooth_efs_file:file { open read };
 r_dir_file(bluetooth_loader, bluetooth_data_file)
 allow bluetooth_loader self:capability { dac_override dac_read_search chown };
 
 # It may write a random mac here
-allow bluetooth_loader persist_file:dir { add_name write };
-allow bluetooth_loader persist_file:file { create_file_perms };
+#allow bluetooth_loader persist_file:dir { add_name write };
+#allow bluetooth_loader persist_file:file { create_file_perms };
 
 # Talk to init over the property socket
 unix_socket_connect(bluetooth_loader, property, init)