diff --git a/private/untrusted_app_all.te b/private/untrusted_app_all.te
index aebb711..2c81ebd 100644
--- a/private/untrusted_app_all.te
+++ b/private/untrusted_app_all.te
@@ -23,7 +23,7 @@
 # Some apps ship with shared libraries and binaries that they write out
 # to their sandbox directory and then execute.
 allow untrusted_app_all privapp_data_file:file { r_file_perms execute };
-allow untrusted_app_all app_data_file:file     { r_file_perms execute };
+allow untrusted_app_all app_data_file:file r_file_perms;
 
 # Allow loading and deleting renderscript created shared libraries
 # within an application home directory.