diff --git a/private/system_server.te b/private/system_server.te
index 6e5e566..10607bc 100644
--- a/private/system_server.te
+++ b/private/system_server.te
@@ -758,8 +758,7 @@
 # For AppFuse.
 allow system_server vold:fd use;
 allow system_server fuse_device:chr_file { read write ioctl getattr };
-allow system_server app_fuse_file:dir rw_dir_perms;
-allow system_server app_fuse_file:file { read write open getattr append };
+allow system_server app_fuse_file:file { read write getattr };
 
 # For configuring sdcardfs
 allow system_server configfs:dir { create_dir_perms };