diff --git a/private/priv_app.te b/private/priv_app.te
index 2c28b184c06b62dc189b25a87bf29e5c542a048c..dc1690c4607283644e0f92fd5e27d9d9efd9fe2c 100644
--- a/private/priv_app.te
+++ b/private/priv_app.te
@@ -18,7 +18,7 @@ allow priv_app self:process ptrace;
 
 # Some apps ship with shared libraries that they write out
 # to their sandbox directory and then dlopen().
-allow priv_app app_data_file:file { r_file_perms execute };
+allow priv_app app_data_file:file execute;
 
 allow priv_app audioserver_service:service_manager find;
 allow priv_app cameraserver_service:service_manager find;