diff --git a/kernel.te b/kernel.te
index 6747d1c4b6927c61da8b16bdb408940d5b7e96c2..ffefdf335ef367a8c09bb437cde59c753f4a8e28 100644
--- a/kernel.te
+++ b/kernel.te
@@ -42,7 +42,7 @@ allow kernel self:security setcheckreqprot;
 
 # MTP sync (b/15835289)
 # kernel thread "loop0", used by the loop block device, for ASECs (b/17158723)
-allow kernel untrusted_app:fd use;
+allow kernel { priv_app untrusted_app }:fd use;
 allow kernel sdcard_type:file { read write };
 
 # Allow the kernel to read OBB files from app directories. (b/17428116)