diff --git a/public/update_engine_common.te b/public/update_engine_common.te
index 29d730ce4623d0f6bcbf53ff96905685d50f167b..8e454cc0e49a980b7a08e774a9e6366e5a1a006f 100644
--- a/public/update_engine_common.te
+++ b/public/update_engine_common.te
@@ -30,7 +30,7 @@ allow update_engine_common postinstall_file:dir r_dir_perms;
 allow update_engine_common shell_exec:file rx_file_perms;
 
 # Allow update_engine_common to suspend, resume and kill the postinstall program.
-allow update_engine_common postinstall:process { signal sigstop };
+allow update_engine_common postinstall:process { signal sigstop sigkill };
 
 # access /proc/misc
 # Access is also granted to proc:file, but it is likely unneeded