diff --git a/private/system_server.te b/private/system_server.te
index e9942ed29d41288e816e3cc24d07fbc4c42ad7a4..752dee7e02b3fa9fdf598351fad6412b1689cd3b 100644
--- a/private/system_server.te
+++ b/private/system_server.te
@@ -678,7 +678,7 @@ allow system_server app_fuse_file:file { read write open getattr append };
 
 # For configuring sdcardfs
 allow system_server configfs:dir { create_dir_perms };
-allow system_server configfs:file { getattr open unlink write };
+allow system_server configfs:file { getattr open create unlink write };
 
 # Connect to adbd and use a socket transferred from it.
 # Used for e.g. jdwp.