diff --git a/sepolicy/ohos_policy/update/sys_installer_sa/system/sys_installer_sa.te b/sepolicy/ohos_policy/update/sys_installer_sa/system/sys_installer_sa.te
index f940450e..3d0efd71 100644
--- a/sepolicy/ohos_policy/update/sys_installer_sa/system/sys_installer_sa.te
+++ b/sepolicy/ohos_policy/update/sys_installer_sa/system/sys_installer_sa.te
@@ -90,3 +90,4 @@ allow sys_installer_sa vendor_etc_file:dir { search };
 allow sys_installer_sa dev_block_volfile:dir { search };
 allow sys_installer_sa dev_block_file:lnk_file { read };
 allow sys_installer_sa update_firmware_file:file { map };
+allow sys_installer_sa dev_block_file:blk_file { write getattr read open };