diff --git a/sepolicy/isolated_app.te b/sepolicy/isolated_app.te
new file mode 100644
index 0000000..8fb3a60
--- /dev/null
+++ b/sepolicy/isolated_app.te
@@ -0,0 +1,2 @@
+allow isolated_app app_data_file:dir { search getattr };
+allow isolated_app shell_data_file:dir search;