diff --git a/system_server.te b/system_server.te
index d7453ad2f516abea5002559d93d26e8933d3d659..e6167f1d397f54925f0f2e192616edf2debaf586 100644
--- a/system_server.te
+++ b/system_server.te
@@ -70,6 +70,9 @@ allow system_server self:netlink_kobject_uevent_socket create_socket_perms;
 # Use generic netlink sockets.
 allow system_server self:netlink_socket create_socket_perms;
 
+# Set and get routes directly via netlink.
+allow system_server self:netlink_route_socket nlmsg_write;
+
 # Kill apps.
 allow system_server appdomain:process { sigkill signal };