diff --git a/private/compat/28.0/28.0.ignore.cil b/private/compat/28.0/28.0.ignore.cil
index 0e1b41484cad1bf6989eaa2bf8fafb412105a11b..9178ac921334df96be49d3cfc32f0a811fbd6e8e 100644
--- a/private/compat/28.0/28.0.ignore.cil
+++ b/private/compat/28.0/28.0.ignore.cil
@@ -68,6 +68,8 @@
     permissionmgr_service
     recovery_socket
     role_service
+    rs
+    rs_exec
     rss_hwm_reset
     rss_hwm_reset_exec
     runtime_service
diff --git a/private/rs.te b/private/rs.te
index 9229ed949d530712b18494a227632c4b4264f848..56f8dfcc7f78de028fcd612c3875237a5676f174 100644
--- a/private/rs.te
+++ b/private/rs.te
@@ -1,6 +1,3 @@
-type rs, domain, coredomain;
-type rs_exec, system_file_type, exec_type, file_type;
-
 # Any files which would have been created as app_data_file
 # will be created as rs_data_file instead.
 allow rs app_data_file:dir ra_dir_perms;
diff --git a/public/rs.te b/public/rs.te
new file mode 100644
index 0000000000000000000000000000000000000000..16b6e9630647bd3827bfa860c1531364ef299ec1
--- /dev/null
+++ b/public/rs.te
@@ -0,0 +1,2 @@
+type rs, domain, coredomain;
+type rs_exec, system_file_type, exec_type, file_type;