diff --git a/system_server.te b/system_server.te
index a049e3525885471953cb1c289afb4b8fe515266d..3b331605227e1999c7f9295e03e236e3b84e43f8 100644
--- a/system_server.te
+++ b/system_server.te
@@ -385,6 +385,9 @@ allow system_server keystore:keystore_key {
 allow system_server persistent_data_block_device:blk_file rw_file_perms;
 allow system_server block_device:dir search;
 
+# Clean up old cgroups
+allow system_server cgroup:dir { remove_name rmdir };
+
 ###
 ### Neverallow rules
 ###