diff --git a/private/system_server.te b/private/system_server.te
index e9942ed..752dee7 100644
--- a/private/system_server.te
+++ b/private/system_server.te
@@ -678,7 +678,7 @@
 
 # For configuring sdcardfs
 allow system_server configfs:dir { create_dir_perms };
-allow system_server configfs:file { getattr open unlink write };
+allow system_server configfs:file { getattr open create unlink write };
 
 # Connect to adbd and use a socket transferred from it.
 # Used for e.g. jdwp.