diff --git a/installd.te b/installd.te
index 54f276a7194f1dc9185770fa092f057ae897d23d..7f4074f2a109b8488a8ddf3256c19f7957ff0dfa 100644
--- a/installd.te
+++ b/installd.te
@@ -95,3 +95,6 @@ allow installd { system_app_data_file bluetooth_data_file nfc_data_file radio_da
 
 # Create and use pty created by android_fork_execvp().
 allow installd devpts:chr_file rw_file_perms;
+
+# execute toybox for app relocation
+allow installd toolbox_exec:file rx_file_perms;