diff --git a/public/app.te b/public/app.te
index 1dca49cb538c25ef9ae55d4d9755cca029cdb70f..411ce593f6d32612e8ba62ec4b8eb472ab6aacdd 100644
--- a/public/app.te
+++ b/public/app.te
@@ -201,6 +201,7 @@ userdebug_or_eng(`
     -platform_app
     -priv_app
     -shell
+    -su
     -system_app
     -untrusted_app_all
   } proc_net_type:{ dir file lnk_file } { getattr open read };