diff --git a/sepolicy/private/update_engine.te b/sepolicy/private/update_engine.te
index 70c37ec..9402552 100644
--- a/sepolicy/private/update_engine.te
+++ b/sepolicy/private/update_engine.te
@@ -2,6 +2,7 @@
 r_dir_file(update_engine, storage_file)
 
 allow update_engine self:capability { chown fsetid };
+allow update_engine self:process { setexec };
 
 allow update_engine labeledfs:filesystem { mount unmount };