diff --git a/sepolicy/system.te b/sepolicy/system.te
index 283d6b1..7504d7e 100644
--- a/sepolicy/system.te
+++ b/sepolicy/system.te
@@ -14,4 +14,4 @@
 allow system_server resourcecache_data_file:file create_file_perms;
 
 # System server dynamically loads some dexfiles
-allow system_server dex2oat_exec:file execute;
+allow system_server dex2oat_exec:file rx_file_perms;