diff --git a/kernel.te b/kernel.te
index fa8ccd523bdc89bd073845c3062ae2c58fe737b3..ff34ece6c5086627ca9ee7e30878f9a5c78becb0 100644
--- a/kernel.te
+++ b/kernel.te
@@ -45,7 +45,7 @@ allow kernel self:security setcheckreqprot;
 
 # MTP sync (b/15835289)
 # kernel thread "loop0", used by the loop block device, for ASECs (b/17158723)
-allow kernel vold:fd use;
+allow kernel untrusted_app:fd use;
 allow kernel sdcard_type:file { read write };
 
 # Allow the kernel to read OBB files from app directories. (b/17428116)
@@ -53,6 +53,7 @@ allow kernel sdcard_type:file { read write };
 # Fixes CTS tests:
 #  * android.os.storage.cts.StorageManagerTest#testMountAndUnmountObbNormal
 #  * android.os.storage.cts.StorageManagerTest#testMountAndUnmountTwoObbs
+allow kernel vold:fd use;
 allow kernel app_data_file:file read;
 
 ###