diff --git a/app.te b/app.te
index 236335a8e96b74c959f2ab9ec669be187f47b620..1afa4b5c0a6d566a2ac8212c88dba980bc9e8d12 100644
--- a/app.te
+++ b/app.te
@@ -76,8 +76,7 @@ allow { appdomain -isolated_app } app_data_file:notdevfile_class_set create_file
 allow appdomain mnt_expand_file:dir r_dir_perms;
 
 # Keychain and user-trusted credentials
-allow appdomain keychain_data_file:dir r_dir_perms;
-allow appdomain keychain_data_file:file r_file_perms;
+r_dir_file(appdomain, keychain_data_file)
 allow appdomain misc_user_data_file:dir r_dir_perms;
 allow appdomain misc_user_data_file:file r_file_perms;