diff --git a/Android.bp b/Android.bp
index 331629f..3a77d03 100644
--- a/Android.bp
+++ b/Android.bp
@@ -28,9 +28,17 @@ android_app {
     resource_dirs: [
         "app/src/main/res",
     ],
+    required: ["privapp_whitelist_im.angry.openeuicc.xml"],
     manifest: "app/src/main/AndroidManifest.xml",
     privileged: true,
     platform_apis: true,
     system_ext_specific: true,
     certificate: "platform",
 }
+
+prebuilt_etc {
+    name: "privapp_whitelist_im.angry.openeuicc.xml",
+    system_ext_specific: true,
+    src: "privapp_whitelist_im.angry.openeuicc.xml",
+    sub_dir: "permissions",
+}
diff --git a/app/src/main/java/im/angry/openeuicc/core/EuiccChannel.kt b/app/src/main/java/im/angry/openeuicc/core/EuiccChannel.kt
index 84c8326..53fd3c7 100644
--- a/app/src/main/java/im/angry/openeuicc/core/EuiccChannel.kt
+++ b/app/src/main/java/im/angry/openeuicc/core/EuiccChannel.kt
@@ -8,7 +8,7 @@ data class EuiccChannelInfo(
     val cardId: Int,
     val name: String,
     val imei: String,
-    val removable: Boolean,
+    val removable: Boolean
 )
 
 abstract class EuiccChannel(
@@ -24,4 +24,4 @@ abstract class EuiccChannel(
     abstract val valid: Boolean
 
     abstract fun close()
-}
\ No newline at end of file
+}
diff --git a/app/src/main/java/im/angry/openeuicc/core/OmapiChannel.kt b/app/src/main/java/im/angry/openeuicc/core/OmapiChannel.kt
index 281564c..aae55fb 100644
--- a/app/src/main/java/im/angry/openeuicc/core/OmapiChannel.kt
+++ b/app/src/main/java/im/angry/openeuicc/core/OmapiChannel.kt
@@ -9,7 +9,7 @@ import java.lang.Exception
 
 class OmapiChannel private constructor(
     info: EuiccChannelInfo,
-    private val channel: Channel,
+    private val channel: Channel
 ) : EuiccChannel(info) {
     companion object {
         private const val TAG = "OmapiChannel"
diff --git a/privapp_whitelist_im.angry.openeuicc.xml b/privapp_whitelist_im.angry.openeuicc.xml
new file mode 100644
index 0000000..88d35cc
--- /dev/null
+++ b/privapp_whitelist_im.angry.openeuicc.xml
@@ -0,0 +1,9 @@
+<?xml version="1.0" encoding="utf-8"?>
+<permissions>
+    <privapp-permissions package="im.angry.openeuicc">
+        <permission name="android.permission.READ_PRIVILEGED_PHONE_STATE" />
+        <permission name="android.permission.WRITE_EMBEDDED_SUBSCRIPTIONS" />
+        <permission name="android.permission.MODIFY_PHONE_STATE" />
+        <permission name="android.permission.SECURE_ELEMENT_PRIVILEGED_OPERATION" />
+    </privapp-permissions>
+</permissions>