diff --git a/app.te b/app.te
index b3082fbc32ff864ed5c41b067f15800691c6fb7f..b9027fe909483d9e2fb492c9a2c17e7170d4ba89 100644
--- a/app.te
+++ b/app.te
@@ -298,7 +298,8 @@ neverallow { appdomain -system_app }
 # Write to various other parts of /data.
 neverallow appdomain drm_data_file:dir_file_class_set
     { create write setattr relabelfrom relabelto append unlink link rename };
-neverallow appdomain gps_data_file:dir_file_class_set
+neverallow { appdomain -system_app }
+    gps_data_file:dir_file_class_set
     { create write setattr relabelfrom relabelto append unlink link rename };
 neverallow { appdomain -platform_app }
     apk_data_file:dir_file_class_set