diff --git a/apex/com.android.conscrypt-file_contexts b/apex/com.android.conscrypt-file_contexts
new file mode 100644
index 0000000000000000000000000000000000000000..ffc31092de2f00fdea777247a843c2b12295392f
--- /dev/null
+++ b/apex/com.android.conscrypt-file_contexts
@@ -0,0 +1,5 @@
+#############################
+# System files
+#
+(/.*)?                   u:object_r:system_file:s0
+/lib(64)?(/.*)?          u:object_r:system_lib_file:s0