diff --git a/sepolicy/vendor/vold.te b/sepolicy/vendor/vold.te
index d4bd9f39..9615edab 100644
--- a/sepolicy/vendor/vold.te
+++ b/sepolicy/vendor/vold.te
@@ -1,6 +1,5 @@
-# TODO: (b/35810138) the keymaster HAL must be binderized.
-passthrough_hal_client_domain(vold, hal_keymaster);
-
 get_prop(vold, tee_listener_prop)
 
 allow vold sysfs_scsi_devices_0000:file write;
+
+allow vold persist_file:dir r_dir_perms;