diff --git a/private/system_app.te b/private/system_app.te
index 904b8518dd5613617109af173b2afb89aa043d5d..0381c4f9acaca6df065cb50ad2de5d5ad3bd66b9 100644
--- a/private/system_app.te
+++ b/private/system_app.te
@@ -67,6 +67,15 @@ allow system_app {
   -vold_service
   -vr_hwc_service
 }:service_manager find;
+# suppress denials for services system_app should not be accessing.
+dontaudit system_app {
+  dumpstate_service
+  installd_service
+  netd_service
+  virtual_touchpad_service
+  vold_service
+  vr_hwc_service
+}:service_manager find;
 
 allow system_app keystore:keystore_key {
     get_state