diff --git a/system_server.te b/system_server.te
index fd2d13076ed083c63be84eca4789ad810512c2b0..d7ba39490c41e9bca55672d0097aa017ea373180 100644
--- a/system_server.te
+++ b/system_server.te
@@ -42,6 +42,7 @@ allow system_server anr_data_file:dir relabelto;
 allow system_server system_data_file:dir relabelto;
 allow system_server apk_data_file:file relabelto;
 allow system_server apk_tmp_file:file relabelto;
+allow system_server apk_private_tmp_file:file relabelto;
 allow system_server cache_backup_file:file relabelto;
 allow system_server apk_private_tmp_file:file relabelto;
 allow system_server wallpaper_file:file relabelto;
diff --git a/vold.te b/vold.te
index 25e586acc91ffd7f759ff2ca85d99c625394cd4b..1fce7bd244799aa3f047dc6594c41fc0cff1bbf3 100644
--- a/vold.te
+++ b/vold.te
@@ -50,6 +50,7 @@ allow vold efs_file:file rw_file_perms;
 
 # Create and mount on /data/tmp_mnt.
 allow vold system_data_file:dir { create rw_dir_perms mounton };
+allow vold system_data_file:file create_file_perms;
 
 # Set scheduling policy of kernel processes
 allow vold kernel:process setsched;