diff --git a/Android.bp b/Android.bp
index 331629f..3a77d03 100644
--- a/Android.bp
+++ b/Android.bp
@@ -28,9 +28,17 @@ android_app {
     resource_dirs: [
         "app/src/main/res",
     ],
+    required: ["privapp_whitelist_im.angry.openeuicc.xml"],
     manifest: "app/src/main/AndroidManifest.xml",
     privileged: true,
     platform_apis: true,
     system_ext_specific: true,
     certificate: "platform",
 }
+
+prebuilt_etc {
+    name: "privapp_whitelist_im.angry.openeuicc.xml",
+    system_ext_specific: true,
+    src: "privapp_whitelist_im.angry.openeuicc.xml",
+    sub_dir: "permissions",
+}
diff --git a/privapp_whitelist_im.angry.openeuicc.xml b/privapp_whitelist_im.angry.openeuicc.xml
new file mode 100644
index 0000000..88d35cc
--- /dev/null
+++ b/privapp_whitelist_im.angry.openeuicc.xml
@@ -0,0 +1,9 @@
+<?xml version="1.0" encoding="utf-8"?>
+<permissions>
+    <privapp-permissions package="im.angry.openeuicc">
+        <permission name="android.permission.READ_PRIVILEGED_PHONE_STATE" />
+        <permission name="android.permission.WRITE_EMBEDDED_SUBSCRIPTIONS" />
+        <permission name="android.permission.MODIFY_PHONE_STATE" />
+        <permission name="android.permission.SECURE_ELEMENT_PRIVILEGED_OPERATION" />
+    </privapp-permissions>
+</permissions>