diff --git a/dex2oat.te b/dex2oat.te
index 51acc86bfb402a35188f90f968763508741d711f..164e89c4df63f58defea107f0b5ad921639a41a3 100644
--- a/dex2oat.te
+++ b/dex2oat.te
@@ -4,3 +4,6 @@ type dex2oat_exec, exec_type, file_type;
 
 allow dex2oat dalvikcache_data_file:file write;
 allow dex2oat installd:fd use;
+
+# Read already open asec_apk_file file descriptors passed by installd.
+allow dex2oat asec_apk_file:file read;