diff --git a/system_app.te b/system_app.te
index 1c50dff9eededaf8ecae59ab5ad3c3cef72befff..2ea621c48ad723e82da1b5c030411f6cece0685f 100644
--- a/system_app.te
+++ b/system_app.te
@@ -10,7 +10,7 @@ binder_service(system_app)
 
 # Read and write /data/data subdirectory.
 allow system_app system_app_data_file:dir create_dir_perms;
-allow system_app system_app_data_file:file create_file_perms;
+allow system_app system_app_data_file:{ file lnk_file } create_file_perms;
 
 # Read /data/misc/keychain subdirectory.
 allow system_app keychain_data_file:dir r_dir_perms;