diff --git a/sepolicy/file.te b/sepolicy/file.te
new file mode 100644
index 0000000..95a9c38
--- /dev/null
+++ b/sepolicy/file.te
@@ -0,0 +1,2 @@
+# Support asec containers getting mounted
+allow file_type rootfs:filesystem associate;
diff --git a/sepolicy/sepolicy.mk b/sepolicy/sepolicy.mk
index d777804..f45c38f 100644
--- a/sepolicy/sepolicy.mk
+++ b/sepolicy/sepolicy.mk
@@ -7,6 +7,7 @@
     vendor/cm/sepolicy
 
 BOARD_SEPOLICY_UNION += \
+    file.te \
     file_contexts \
     fs_use \
     seapp_contexts \