diff --git a/kernel.te b/kernel.te
index 084462486ea3c963bc3daa7d76c87f99d13a291e..ca01bbf621be30368807113bf4cd4ea1fff4ef64 100644
--- a/kernel.te
+++ b/kernel.te
@@ -34,6 +34,9 @@ dontaudit kernel self:security setenforce;
 # Set checkreqprot by init.rc prior to switching to init domain.
 allow kernel self:security setcheckreqprot;
 
+# MTP sync
+allow kernel sdcard_internal:file write;
+
 ###
 ### neverallow rules
 ###