diff --git a/public/init.te b/public/init.te
index a2f82779f14aef78a3d8778fbe3da63855718528..352cb3d6d34fa7fed079d49e77c0eb03f570b39b 100644
--- a/public/init.te
+++ b/public/init.te
@@ -85,6 +85,7 @@ allow init cpuctl_device:dir { create mounton };
 # /config
 allow init configfs:dir mounton;
 allow init configfs:dir create_dir_perms;
+allow init configfs:{ file lnk_file } create_file_perms;
 
 # Use tmpfs as /data, used for booting when /data is encrypted
 allow init tmpfs:dir relabelfrom;