diff --git a/kernel.te b/kernel.te
index ff34ece6c5086627ca9ee7e30878f9a5c78becb0..b9197e22102effff95e91893b7e3d0bfac813242 100644
--- a/kernel.te
+++ b/kernel.te
@@ -55,6 +55,7 @@ allow kernel sdcard_type:file { read write };
 #  * android.os.storage.cts.StorageManagerTest#testMountAndUnmountTwoObbs
 allow kernel vold:fd use;
 allow kernel app_data_file:file read;
+allow kernel asec_image_file:file read;
 
 ###
 ### neverallow rules