diff --git a/app.te b/app.te
index be3ead8759882c687d01fa47743845a81ef358d3..827a3be9f25cd96b7f7621b5183db35263354a5a 100644
--- a/app.te
+++ b/app.te
@@ -284,7 +284,8 @@ neverallow { appdomain -system_app }
 # Write to various other parts of /data.
 neverallow appdomain drm_data_file:dir_file_class_set
     { create write setattr relabelfrom relabelto append unlink link rename };
-neverallow appdomain gps_data_file:dir_file_class_set
+neverallow { appdomain -system_app }
+    gps_data_file:dir_file_class_set
     { create write setattr relabelfrom relabelto append unlink link rename };
 neverallow { appdomain -platform_app }
     apk_data_file:dir_file_class_set