diff --git a/bin/arm64/lspinit b/bin/arm64/lspinit
index 387d41da6e..f46512b8b9 100644
Binary files a/bin/arm64/lspinit and b/bin/arm64/lspinit differ
diff --git a/bin/x64/lspinit b/bin/x64/lspinit
index e642079d1c..1775e8102c 100644
Binary files a/bin/x64/lspinit and b/bin/x64/lspinit differ
diff --git a/scripts/build.sh b/scripts/build.sh
index 4ff2c29085..f0b25ca6e8 100755
--- a/scripts/build.sh
+++ b/scripts/build.sh
@@ -542,6 +542,7 @@ if [ "$HAS_GAPPS" ]; then
     if [ -f "$GAPPS_IMAGE_PATH" ] && [ -f "$GAPPS_RC_PATH" ]; then
         echo "Integrating GApps"
         "$WORK_DIR/magisk/magiskboot" cpio "$WORK_DIR/wsa/$ARCH/Tools/initrd.img" \
+            "add 000 /lspolicy.rule sepolicy.rule" \
             "add 000 overlay.d/gapps.rc $GAPPS_RC_PATH" \
             "add 000 overlay.d/sbin/lsp_gapps.img $GAPPS_IMAGE_PATH" \
             || abort "Unable to patch initrd"
diff --git a/scripts/sepolicy.rule b/scripts/sepolicy.rule
new file mode 100644
index 0000000000..265b4deb31
--- /dev/null
+++ b/scripts/sepolicy.rule
@@ -0,0 +1,5 @@
+allow gmscore_app gmscore_app vsock_socket { create connect write read }
+allow gmscore_app device_config_runtime_native_boot_prop file read
+allow gmscore_app system_server_tmpfs dir search
+allow gmscore_app system_server_tmpfs file open
+allow gmscore_app { system_server_tmpfs media_rw_data_file } filesystem getattr