diff --git a/app.te b/app.te
index 9a3ccc444b2055ade354d1f5d5c0e5bf32ccd4c4..d47382958ca38c0ff913be604f53da262d45ff08 100644
--- a/app.te
+++ b/app.te
@@ -290,7 +290,8 @@ neverallow { appdomain -system_app }
 # Write to various other parts of /data.
 neverallow appdomain drm_data_file:dir_file_class_set
     { create write setattr relabelfrom relabelto append unlink link rename };
-neverallow appdomain gps_data_file:dir_file_class_set
+neverallow { appdomain -system_app }
+    gps_data_file:dir_file_class_set
     { create write setattr relabelfrom relabelto append unlink link rename };
 neverallow { appdomain -platform_app }
     apk_data_file:dir_file_class_set