diff --git a/domain.te b/domain.te
index c0908d3f78bffefa3f96272e990475e04a443530..6b14fe4ea6b9514feb431b1a4bd2e340f49f8748 100644
--- a/domain.te
+++ b/domain.te
@@ -501,7 +501,7 @@ neverallow {
 } shell:process { transition dyntransition };
 
 # Only domains spawned from zygote and runas may have the appdomain attribute.
-neverallow { domain -runas -zygote -init } {
+neverallow { domain -runas -zygote } {
   appdomain -shell userdebug_or_eng(`-su')
 }:process { transition dyntransition };