diff --git a/app.te b/app.te
index 27e6055e0171a99c012d27f5d7ec8d48fae2ee0e..21fdc8ad5b816cac18b8ec7ed0c0c7ea8522a470 100644
--- a/app.te
+++ b/app.te
@@ -75,8 +75,7 @@ allow { appdomain -isolated_app } app_data_file:notdevfile_class_set create_file
 allow appdomain mnt_expand_file:dir r_dir_perms;
 
 # Keychain and user-trusted credentials
-allow appdomain keychain_data_file:dir r_dir_perms;
-allow appdomain keychain_data_file:file r_file_perms;
+r_dir_file(appdomain, keychain_data_file)
 allow appdomain misc_user_data_file:dir r_dir_perms;
 allow appdomain misc_user_data_file:file r_file_perms;