diff --git a/app.te b/app.te
index eb9179369a6b741453f7d48c50ad128b5ded08e7..f53f633c43df93b1881457c7887d72732753d81e 100644
--- a/app.te
+++ b/app.te
@@ -152,6 +152,9 @@ allow appdomain self:rawip_socket create_socket_perms;
 allow appdomain usb_device:chr_file { read write getattr ioctl };
 allow appdomain usbaccessory_device:chr_file { read write getattr };
 
+# For art.
+allow appdomain dalvikcache_data_file:file execute;
+
 ###
 ### CTS-specific rules
 ###
diff --git a/platform_app.te b/platform_app.te
index 5a0167e10bcae66bfaeb83ffbc96ff511e8441f6..40f2dd333cf88ae11a24e872cea2f6b0e9b9ad27 100644
--- a/platform_app.te
+++ b/platform_app.te
@@ -36,6 +36,7 @@ allow platform_app appdomain:fifo_file write;
 # App sandbox file accesses.
 allow platformappdomain platform_app_data_file:dir create_dir_perms;
 allow platformappdomain platform_app_data_file:notdevfile_class_set create_file_perms;
+allow platformappdomain platform_app_data_file:file execute;
 # App sdcard file accesses
 allow platformappdomain sdcard_type:dir create_dir_perms;
 allow platformappdomain sdcard_type:file create_file_perms;
diff --git a/system_server.te b/system_server.te
index 69e9cb082111993cdb3cbf701770e7feaf20332a..4c73627eeca67e3de6209c4a15e59a610d072757 100644
--- a/system_server.te
+++ b/system_server.te
@@ -8,6 +8,9 @@ permissive system_server;
 # Dalvik Compiler JIT Mapping.
 allow system_server self:process execmem;
 
+# For art.
+allow system_server dalvikcache_data_file:file execute;
+
 # Child of the zygote.
 allow system_server zygote:fd use;
 allow system_server zygote:process sigchld;