diff --git a/sepolicy/qcom/thermal-engine.te b/sepolicy/qcom/thermal-engine.te
new file mode 100644
index 00000000..e616275d
--- /dev/null
+++ b/sepolicy/qcom/thermal-engine.te
@@ -0,0 +1,4 @@
+allow thermal-engine self:netlink_kobject_uevent_socket create_socket_perms;
+r_dir_file(thermal-engine, sysfs_rqstats);
+
+allow thermal-engine self:capability { net_admin } ;