diff --git a/sepolicy/file_contexts b/sepolicy/file_contexts
index 5fbdbe2..8624cf0 100644
--- a/sepolicy/file_contexts
+++ b/sepolicy/file_contexts
@@ -10,6 +10,7 @@
 /efs/bluetooth(/.*)?				u:object_r:bluetooth_efs_file:s0
 
 #Workaround for QSEECOM
+/firmware/image/keymaste.*	u:object_r:keymaster_firmware_file:s0
 /firmware/image/sshdcpap.mdt	u:object_r:sshdcpap_firmware_file:s0
 
 /efs/wifi(/.*)?			u:object_r:wifi_efs_file:s0
diff --git a/sepolicy/qseecomd.te b/sepolicy/qseecomd.te
index 5ee6b07..de22f68 100644
--- a/sepolicy/qseecomd.te
+++ b/sepolicy/qseecomd.te
@@ -1,3 +1,4 @@
 type qseecom_device, dev_type;
 allow tee system_prop:property_service set;
 allow tee sshdcpap_firmware_file:file r_file_perms;
+allow tee keymaster_firmware_file:file r_file_perms;