diff --git a/kernel.te b/kernel.te
index b8a8cf28b64ee99f19117d00d1141f98d4392720..d5a75b4d6e50783d5cca0a54b46c818fe5573bc6 100644
--- a/kernel.te
+++ b/kernel.te
@@ -34,8 +34,9 @@ dontaudit kernel self:security setenforce;
 # Set checkreqprot by init.rc prior to switching to init domain.
 allow kernel self:security setcheckreqprot;
 
-# MTP sync
-allow kernel fuse:file { read write };
+# MTP sync (b/15835289)
+# kernel thread "loop0", used by the loop block device, for ASECs (b/17158723)
+allow kernel sdcard_type:file { read write };
 
 ###
 ### neverallow rules