diff --git a/isolated_app.te b/isolated_app.te
index 53dfbc48301ada05c6023ba6f53d396aa2157902..14e7f293d10f68ec7480f3a565b84a30bd8e445d 100644
--- a/isolated_app.te
+++ b/isolated_app.te
@@ -13,7 +13,7 @@ type isolated_app, domain;
 app_domain(isolated_app)
 
 # Access already open app data files received over Binder or local socket IPC.
-allow isolated_app app_data_file:file { read write getattr lock };
+allow isolated_app app_data_file:file { append read write getattr lock };
 
 allow isolated_app activity_service:service_manager find;
 allow isolated_app display_service:service_manager find;