diff --git a/sepolicy/ohos_policy/bundlemanager/bundle_framework/system/installs.te b/sepolicy/ohos_policy/bundlemanager/bundle_framework/system/installs.te
index 140ae237a1c9f27ab5f7b10b7ae662ef6b344e84..7ad775a81be84569e2fab07633dbdebe72c28695 100644
--- a/sepolicy/ohos_policy/bundlemanager/bundle_framework/system/installs.te
+++ b/sepolicy/ohos_policy/bundlemanager/bundle_framework/system/installs.te
@@ -178,6 +178,12 @@ allow installs data_log:file { read_file_perms_without_ioctl };
 allow installs data_app_el2_file:file { ioctl open write };
 allowxperm installs data_app_el2_file:file ioctl { 0x5413 };
 allowxperm installs data_app_el2_file:dir ioctl { 0x581f 0x5820 };
+allow installs normal_hap_data_file:dir { ioctl };
+allowxperm installs normal_hap_data_file:dir ioctl { 0x581f };
+allow installs system_basic_hap_data_file:dir { ioctl };
+allowxperm installs system_basic_hap_data_file:dir ioctl { 0x581f };
+allow installs system_core_hap_data_file:dir { ioctl };
+allowxperm installs system_core_hap_data_file:dir ioctl { 0x581f };
 allow installs memmgrservice:binder { call };
 allow installs sa_memory_manager_service:samgr_class { get };
 allow installs hap_file_attr:lnk_file { getattr setattr relabelfrom relabelto unlink rename };