diff --git a/init/init_gsi.cpp b/init/init_gsi.cpp
index b3a577c..b278821 100644
--- a/init/init_gsi.cpp
+++ b/init/init_gsi.cpp
@@ -41,6 +41,7 @@ void handle_device_model_props() {
     string manufacturer = base::GetProperty("ro.product.vendor.manufacturer", "");
     string fingerprint = base::GetProperty("ro.vendor.build.fingerprint", "");
     string spl = base::GetProperty("ro.vendor.build.security_patch", "");
+    string spl_orig = base::GetProperty("ro.build.version.security_patch", "");
     
     for (const auto& source : RO_PROP_SOURCES) {
         override_ro_prop("ro.product", source, "device", device);
@@ -54,6 +55,7 @@ void handle_device_model_props() {
     override_ro_prop("ro", "", "build.flavor", name + "-user");
     override_ro_prop("ro", "", "build.tags", "release-keys");
     override_ro_prop("ro", "", "build.version.security_patch", spl);
+    override_ro_prop("ro", "", "build.version.real_security_patch", spl_orig);
 }
 
 int main() {
diff --git a/sepolicy/private/mtk_hal_mms.te b/sepolicy/private/mtk_hal_mms.te
new file mode 100644
index 0000000..a60bd2b
--- /dev/null
+++ b/sepolicy/private/mtk_hal_mms.te
@@ -0,0 +1,6 @@
+attribute hal_mms_server;
+binder_call({appdomain -isolated_app}, hal_mms_server)
+binder_call(hal_mms_server, {appdomain -isolated_app})
+
+type mtk_hal_mms_hwservice, hwservice_manager_type;
+allow { appdomain -isolated_app }  mtk_hal_mms_hwservice:hwservice_manager find;