diff --git a/system_server.te b/system_server.te
index a0286287f698279832829751230a417601c0f7d6..a2cfeba2fc804055b98231cf1a37152289713e27 100644
--- a/system_server.te
+++ b/system_server.te
@@ -175,7 +175,7 @@ allow system_server keychain_data_file:file create_file_perms;
 
 # Manage /data/app.
 allow system_server apk_data_file:dir create_dir_perms;
-allow system_server apk_data_file:file create_file_perms;
+allow system_server apk_data_file:file { create_file_perms link };
 allow system_server apk_tmp_file:dir create_dir_perms;
 allow system_server apk_tmp_file:file create_file_perms;