diff --git a/app.te b/app.te
index 2a6b270b6b404136bfc201e54f863a7cd9965f2c..239d0bb83981553d89f536a0cf860aa4c4c78ea3 100644
--- a/app.te
+++ b/app.te
@@ -122,6 +122,10 @@ allow untrusted_app system_app_data_file:file { read write getattr };
 allow appdomain fuse:dir create_dir_perms;
 allow appdomain fuse:file create_file_perms;
 
+# Access OBBs (vfat images) mounted by vold (b/17633509)
+allow appdomain vfat:dir r_dir_perms;
+allow appdomain vfat:file r_file_perms;
+
 # Allow apps to use the USB Accessory interface.
 # http://developer.android.com/guide/topics/connectivity/usb/accessory.html
 #