diff --git a/Changelog b/Changelog
index 9e53df072..8111e0780 100644
--- a/Changelog
+++ b/Changelog
@@ -1,3 +1,4 @@
+- Add missing x_device rules for XI2 functions, from Eamon Walsh.
 - Add missing rules to make unconfined_cronjob_t a valid cron job domain.
 - Add btrfs and ext4 to labeling targets.
 - Fix infrastructure to expand macros in initrc_context when installing.
diff --git a/policy/flask/access_vectors b/policy/flask/access_vectors
index 9b026f7c5..ef4c063f1 100644
--- a/policy/flask/access_vectors
+++ b/policy/flask/access_vectors
@@ -544,6 +544,8 @@ class x_device
 	set_property
 	add
 	remove
+	create
+	destroy
 }
 
 class x_server