diff --git a/domain.te b/domain.te
index f5d4baed8fc2dce1b6aacc5de4176ec672dac917..103d690b08e24d5c3afcc5ca8789e8cba7570080 100644
--- a/domain.te
+++ b/domain.te
@@ -129,9 +129,8 @@ allow domain security_file:file getattr;
 # capability, it's essentially useless. This is needed to allow an app with
 # relabelto to relabel unlabeled files.
 #
-allow domain unlabeled:file { create_file_perms relabelfrom };
+allow domain unlabeled:notdevfile_class_set { create_file_perms relabelfrom };
 allow domain unlabeled:dir { create_dir_perms relabelfrom };
-allow domain unlabeled:lnk_file { create_file_perms };
 neverallow { domain -relabeltodomain } *:dir_file_class_set relabelto;
 
 ###