diff --git a/sepolicy/kernel.te b/sepolicy/kernel.te
new file mode 100644
index 00000000..b944a75e
--- /dev/null
+++ b/sepolicy/kernel.te
@@ -0,0 +1,2 @@
+# used by sdcardfs to read package list
+allow kernel system_data_file:file open;