diff --git a/public/hal_neverallows.te b/public/hal_neverallows.te
index 036e1d2dca7cb2dbca35b58a897c4465bb3fd8e1..fc2b5f630a54208917b1f3244acd1155a08c3daa 100644
--- a/public/hal_neverallows.te
+++ b/public/hal_neverallows.te
@@ -17,6 +17,7 @@ neverallow {
   -hal_wifi_supplicant_server
   -rild
 } domain:{ tcp_socket udp_socket rawip_socket } *;
+neverallow hal_tetheroffload_server unlabeled:service_manager list; #TODO: b/62658302
 
 ###
 # HALs are defined as an attribute and so a given domain could hypothetically