diff --git a/private/system_server.te b/private/system_server.te
index 999c7e10e70f01f1188c9b709cc6b7ef4f810d07..5ae94096a7983f617033157498f6de1e77adb311 100644
--- a/private/system_server.te
+++ b/private/system_server.te
@@ -681,7 +681,7 @@ allow system_server app_fuse_file:file { read write open getattr append };
 
 # For configuring sdcardfs
 allow system_server configfs:dir { create_dir_perms };
-allow system_server configfs:file { getattr open unlink write };
+allow system_server configfs:file { getattr open create unlink write };
 
 # Connect to adbd and use a socket transferred from it.
 # Used for e.g. jdwp.