diff --git a/Android.mk b/Android.mk
index 83afdbdf223856bbeb8acccd522a84991172f2a8..0abbabe9b40b2b194199d529051f28546b59ee42 100644
--- a/Android.mk
+++ b/Android.mk
@@ -514,7 +514,8 @@ $(HOST_OUT_EXECUTABLES)/build_sepolicy $(HOST_OUT_EXECUTABLES)/secilc $(built_pl
 		-f $(PRIVATE_PLAT_CIL) -t $@
 	# Line markers (denoted by ;;) are malformed after above cmd. They are only
 	# used for debugging, so we remove them.
-	$(hide) sed -i '/;;/d' $@
+	$(hide) grep -v ';;' $@ > $@.tmp
+	$(hide) mv $@.tmp $@
 	# Combine plat_sepolicy.cil and product_sepolicy.cil to make sure that the
 	# latter doesn't accidentally depend on vendor/odm policies.
 	$(hide) $(HOST_OUT_EXECUTABLES)/secilc -m -M true -G -c $(POLICYVERS) \