diff --git a/zygote.te b/zygote.te
index 3af4d913dfcee8b515783f858438343b399262ed..43276a397a24283709b17d2d1d231dd2a91ae793 100644
--- a/zygote.te
+++ b/zygote.te
@@ -11,9 +11,9 @@ allow zygote self:capability setpcap;
 # Switch SELinux context to app domains.
 allow zygote system_server:process dyntransition;
 allow zygote appdomain:process dyntransition;
-# Allow zygote to read + write app data dirs (b/10455872 and b/10498304)
+# Allow zygote to read app data dirs (b/10455872)
 allow zygote appdomain:dir { getattr search };
-allow zygote appdomain:file { r_file_perms write };
+allow zygote appdomain:file { r_file_perms };
 # Move children into the peer process group.
 allow zygote system_server:process { getpgid setpgid };
 allow zygote appdomain:process { getpgid setpgid };