diff --git a/sepolicy/vendor/hal_fingerprint_default.te b/sepolicy/vendor/hal_fingerprint_default.te
index 576340f..6ef7582 100644
--- a/sepolicy/vendor/hal_fingerprint_default.te
+++ b/sepolicy/vendor/hal_fingerprint_default.te
@@ -6,6 +6,7 @@ allow hal_fingerprint_default {
 
 allow hal_fingerprint_default self:netlink_socket create_socket_perms_no_ioctl;
 r_dir_file(hal_fingerprint_default, firmware_file)
+get_prop(hal_fingerprint_default, build_bootimage_prop)
 set_prop(hal_fingerprint_default, vendor_mot_fingerprint_prop)
 allow hal_fingerprint_default vendor_sysfs_fingerprint:dir r_dir_perms;
 allow hal_fingerprint_default vendor_sysfs_fingerprint:file rw_file_perms;