diff --git a/private/file.te b/private/file.te
index 6704c7934153960372065bd719dbf5260004c4e8..a856792f9ba41f9046a51fb1b5de8eb6a3fa5503 100644
--- a/private/file.te
+++ b/private/file.te
@@ -16,3 +16,7 @@ type debugfs_kcov, fs_type, debugfs_type;
 # App executable files in /data/data directories
 type app_exec_data_file, file_type, data_file_type, core_data_file_type;
 typealias app_exec_data_file alias rs_data_file;
+
+# /data/misc_[ce|de]/rollback : Used by installd to store snapshots
+# of application data.
+type rollback_data_file, file_type, data_file_type, core_data_file_type;
diff --git a/private/file_contexts b/private/file_contexts
index 0605ee49555fbc8e5a1938f7e523bb2ef5de813a..11f8f6e58b138cc2083131ad575fbbfd9ea6ca69 100644
--- a/private/file_contexts
+++ b/private/file_contexts
@@ -514,6 +514,10 @@
 # Bootchart data
 /data/bootchart(/.*)?		u:object_r:bootchart_data_file:s0
 
+# App data snapshots (managed by installd).
+/data/misc_de/[0-9]+/rollback(/.*)?       u:object_r:rollback_data_file:s0
+/data/misc_ce/[0-9]+/rollback(/.*)?       u:object_r:rollback_data_file:s0
+
 #############################
 # Expanded data files
 #
diff --git a/private/vold_prepare_subdirs.te b/private/vold_prepare_subdirs.te
index e93e1e5cc704a07b154c27b0cc1d7fc70c66ff4d..09d0ca9230cc4afe024d7d8e1894d51c9a120d26 100644
--- a/private/vold_prepare_subdirs.te
+++ b/private/vold_prepare_subdirs.te
@@ -17,6 +17,7 @@ allow vold_prepare_subdirs {
     face_vendor_data_file
     fingerprint_vendor_data_file
     iris_vendor_data_file
+    rollback_data_file
     storaged_data_file
     vold_data_file
 }:dir { create_dir_perms relabelto };
@@ -24,6 +25,7 @@ allow vold_prepare_subdirs {
     face_vendor_data_file
     fingerprint_vendor_data_file
     iris_vendor_data_file
+    rollback_data_file
     storaged_data_file
     system_data_file
     vold_data_file