diff --git a/common/private/property.te b/common/private/property.te
index 4965d4d0a1326dbff16cff254294f4f94dbf2482..12ec3669e89727585df308654164b0fb886e403a 100644
--- a/common/private/property.te
+++ b/common/private/property.te
@@ -1,2 +1,8 @@
+# Custom legal URL
+system_internal_prop(legal_url_prop)
+
+# Custom version
+system_internal_prop(custom_version_prop)
+
 # Recovery update
 system_internal_prop(recovery_update_prop)
diff --git a/common/private/property_contexts b/common/private/property_contexts
index af7e1b4580aaea0b78c06612b0cd23b27909899b..0ff9b6219cf5b696067cfe3545abd3080b5b32ae 100644
--- a/common/private/property_contexts
+++ b/common/private/property_contexts
@@ -5,6 +5,15 @@ vendor.camera.aux.packagelist          u:object_r:vendor_persist_camera_prop:s0
 # Bluetooth
 bluetooth.hci.disabled_commands        u:object_r:bluetooth_config_prop:s0
 
+# Custom legal URL
+ro.lineagelegal.url                    u:object_r:legal_url_prop:s0
+
+# Custom version
+ro.lineage.version                     u:object_r:custom_version_prop:s0
+ro.lineage.display.version             u:object_r:custom_version_prop:s0
+ro.lineage.build.version               u:object_r:custom_version_prop:s0
+ro.lineage.releasetype                 u:object_r:custom_version_prop:s0
+
 # Radio
 ro.telephony.use_old_mnc_mcc_format    u:object_r:telephony_config_prop:s0
 
diff --git a/common/private/recovery.te b/common/private/recovery.te
index cd1649abf4ab47b36cb1cd97458a1b85fa21d4f0..7d9fae9859c1bf3d3a31238bb73dea2b32ee247f 100644
--- a/common/private/recovery.te
+++ b/common/private/recovery.te
@@ -3,6 +3,9 @@ userdebug_or_eng(`
 permissive recovery;
 ')
 
+# Custom version
+get_prop(recovery, custom_version_prop)
+
 # Volume manager
 r_dir_file(recovery, sdcard_type)
 allow recovery block_device:dir create_dir_perms;
diff --git a/common/private/shell.te b/common/private/shell.te
new file mode 100644
index 0000000000000000000000000000000000000000..680ff782a5006467340671cc710225995d1936a1
--- /dev/null
+++ b/common/private/shell.te
@@ -0,0 +1 @@
+get_prop(shell, custom_version_prop)
diff --git a/common/private/system_app.te b/common/private/system_app.te
index c4fe514ff64b78c770116c9e455a79a607d1d340..3c0dd7bec0879afe70ab211b8f046fece06d21de 100644
--- a/common/private/system_app.te
+++ b/common/private/system_app.te
@@ -1,3 +1,9 @@
+# Allow Settings to read custom legal URL
+get_prop(system_app, legal_url_prop)
+
+# Allow Settings/LineageParts to read custom version
+get_prop(system_app, custom_version_prop)
+
 # Allow Settings to read ro.vendor.build.security_patch
 get_prop(system_app, vendor_security_patch_level_prop)
 
diff --git a/common/private/updater_app.te b/common/private/updater_app.te
index 373c97abc9e0f5bddfe473302c2baa59ba9ff380..d1c50e039627b658f6f6677a4548268572a96761 100644
--- a/common/private/updater_app.te
+++ b/common/private/updater_app.te
@@ -23,6 +23,7 @@ allow updater_app cache_recovery_file:file create_file_perms;
 allow updater_app ota_package_file:dir create_dir_perms;
 allow updater_app ota_package_file:file create_file_perms;
 
+get_prop(updater_app, custom_version_prop)
 get_prop(updater_app, default_prop)
 get_prop(updater_app, build_prop)