diff --git a/app.te b/app.te
index c6ee799bccec367b5e81b3006b95fa52fab203f6..e2eac0fc6b237574945c6bd55f2abec97bb93fae 100644
--- a/app.te
+++ b/app.te
@@ -298,7 +298,8 @@ neverallow { appdomain -system_app }
 # Write to various other parts of /data.
 neverallow appdomain drm_data_file:dir_file_class_set
     { create write setattr relabelfrom relabelto append unlink link rename };
-neverallow appdomain gps_data_file:dir_file_class_set
+neverallow { appdomain -system_app }
+    gps_data_file:dir_file_class_set
     { create write setattr relabelfrom relabelto append unlink link rename };
 neverallow { appdomain -platform_app }
     apk_data_file:dir_file_class_set