diff --git a/sepolicy/vendor/platform_app.te b/sepolicy/vendor/platform_app.te
index 6a1d3da..8d0d23f 100644
--- a/sepolicy/vendor/platform_app.te
+++ b/sepolicy/vendor/platform_app.te
@@ -7,4 +7,3 @@ allow platform_app hal_dms_default:binder { call transfer };
 allow platform_app sysfs_kgsl:lnk_file read;
 get_prop(platform_app, moto_boot_prop)
 get_prop(platform_app, hwrev_prop)
-
diff --git a/sepolicy/vendor/untrusted_app.te b/sepolicy/vendor/untrusted_app.te
new file mode 100644
index 0000000..f1135c4
--- /dev/null
+++ b/sepolicy/vendor/untrusted_app.te
@@ -0,0 +1 @@
+allow untrusted_app sysfs_kgsl:dir search;