diff --git a/system_server.te b/system_server.te
index 269d6ee0529995e1b85ba7c7e77b7f0d5890363f..5f07f65135d212c13523c4f4fe7a7a4df0b540db 100644
--- a/system_server.te
+++ b/system_server.te
@@ -7,10 +7,12 @@ type system_server, domain, mlstrustedsubject;
 # Define a type for tmpfs-backed ashmem regions.
 tmpfs_domain(system_server)
 
-# Dalvik Compiler JIT Mapping.
-allow system_server self:process execmem;
-allow system_server ashmem_device:chr_file execute;
-allow system_server system_server_tmpfs:file execute;
+eng(`
+  # JIT mappings
+  allow system_server self:process execmem;
+  allow system_server ashmem_device:chr_file execute;
+  allow system_server system_server_tmpfs:file execute;
+')
 
 # For art.
 allow system_server dalvikcache_data_file:file execute;
diff --git a/te_macros b/te_macros
index 99a9411e43241ddc999a95a04223aec838adcf90..e455e63162f8a5cbc2f42bec813bdf2c6d8823e2 100644
--- a/te_macros
+++ b/te_macros
@@ -311,6 +311,7 @@ define(`recovery_only', ifelse(target_recovery, `true', $1, ))
 # SELinux rules which apply only to userdebug or eng builds
 #
 define(`userdebug_or_eng', ifelse(target_build_variant, `eng', $1, ifelse(target_build_variant, `userdebug', $1)))
+define(`eng', ifelse(target_build_variant, `eng', $1))
 
 #####################################
 # write_logd(domain)