diff --git a/app.te b/app.te
index 5e69888463420d6e4f2abfdbd667bf13dd561dbc..af8c5089dca224df2f80d107cfc9c71d47b7452b 100644
--- a/app.te
+++ b/app.te
@@ -147,8 +147,9 @@ allow appdomain fuse:dir create_dir_perms;
 allow appdomain fuse:file create_file_perms;
 
 # Access OBBs (vfat images) mounted by vold (b/17633509)
+# File write access allowed for FDs returned through Storage Access Framework
 allow appdomain vfat:dir r_dir_perms;
-allow appdomain vfat:file r_file_perms;
+allow appdomain vfat:file rw_file_perms;
 
 # Allow apps to use the USB Accessory interface.
 # http://developer.android.com/guide/topics/connectivity/usb/accessory.html