diff --git a/private/isolated_app.te b/private/isolated_app.te
index 94b49b0..50cbd8c 100644
--- a/private/isolated_app.te
+++ b/private/isolated_app.te
@@ -92,12 +92,10 @@
 
 # b/17487348
 # Isolated apps can only access three services,
-# activity_service, display_service, webviewupdate_service, and
-# ashmem_device_service.
+# activity_service, display_service, webviewupdate_service.
 neverallow isolated_app {
     service_manager_type
     -activity_service
-    -ashmem_device_service
     -display_service
     -webviewupdate_service
 }:service_manager find;