diff --git a/private/untrusted_app_all.te b/private/untrusted_app_all.te
index f7dfdeb..b4561fa 100644
--- a/private/untrusted_app_all.te
+++ b/private/untrusted_app_all.te
@@ -170,3 +170,8 @@
   # according to the heuristic of lockdown.
   allow untrusted_app_all self:lockdown integrity;
 ')
+
+# Allow running a VM for test/demo purposes
+userdebug_or_eng(`
+  virtualizationservice_use(untrusted_app_all)
+')