diff --git a/common/gatekeeperd.te b/common/gatekeeperd.te
new file mode 100644
index 0000000..00a32af
--- /dev/null
+++ b/common/gatekeeperd.te
@@ -0,0 +1,2 @@
+# allow gatekeeperd to open firmware images (ex. kmota)
+r_dir_file(gatekeeperd, firmware_file)