diff --git a/sepolicy/vendor/hal_imsrtp.te b/sepolicy/vendor/hal_imsrtp.te
index a3950190..e55ec4de 100644
--- a/sepolicy/vendor/hal_imsrtp.te
+++ b/sepolicy/vendor/hal_imsrtp.te
@@ -30,3 +30,8 @@ r_dir_file(hal_imsrtp, sysfs_soc)
 allow hal_imsrtp ion_device:chr_file r_file_perms;
 get_prop(hal_imsrtp, ims_prop)
 binder_call(hal_imsrtp, radio)
+
+userdebug_or_eng(`
+  allow hal_imsrtp diag_device:chr_file rw_file_perms;
+')
+dontaudit hal_imsrtp diag_device:chr_file rw_file_perms;
diff --git a/sepolicy/vendor/hal_rcsservice.te b/sepolicy/vendor/hal_rcsservice.te
index 7de16c8d..cd16cfa9 100644
--- a/sepolicy/vendor/hal_rcsservice.te
+++ b/sepolicy/vendor/hal_rcsservice.te
@@ -27,3 +27,8 @@ binder_call(hal_rcsservice, dataservice_app)
 
 # imsrcsd needs read/write access to devpts
 allow hal_rcsservice devpts:chr_file rw_file_perms;
+
+userdebug_or_eng(`
+  allow hal_rcsservice diag_device:chr_file rw_file_perms;
+')
+dontaudit hal_rcsservice diag_device:chr_file rw_file_perms;