diff --git a/private/priv_app.te b/private/priv_app.te
index 2c28b18..dc1690c 100644
--- a/private/priv_app.te
+++ b/private/priv_app.te
@@ -18,7 +18,7 @@
 
 # Some apps ship with shared libraries that they write out
 # to their sandbox directory and then dlopen().
-allow priv_app app_data_file:file { r_file_perms execute };
+allow priv_app app_data_file:file execute;
 
 allow priv_app audioserver_service:service_manager find;
 allow priv_app cameraserver_service:service_manager find;