diff --git a/installd.te b/installd.te
index 819d2deab398df45229c8592297d2417855b26b2..3b4d56aa4598c10969ee12d70af52d10f7fb2c16 100644
--- a/installd.te
+++ b/installd.te
@@ -95,3 +95,6 @@ allow installd { system_app_data_file bluetooth_data_file nfc_data_file radio_da
 
 # Create and use pty created by android_fork_execvp().
 allow installd devpts:chr_file rw_file_perms;
+
+# execute toybox for app relocation
+allow installd toolbox_exec:file rx_file_perms;