diff --git a/sepolicy/file.te b/sepolicy/file.te
new file mode 100644
index 00000000..95a9c384
--- /dev/null
+++ b/sepolicy/file.te
@@ -0,0 +1,2 @@
+# Support asec containers getting mounted
+allow file_type rootfs:filesystem associate;
diff --git a/sepolicy/sepolicy.mk b/sepolicy/sepolicy.mk
index d7778045..f45c38f3 100644
--- a/sepolicy/sepolicy.mk
+++ b/sepolicy/sepolicy.mk
@@ -7,6 +7,7 @@ BOARD_SEPOLICY_DIRS += \
     vendor/cm/sepolicy
 
 BOARD_SEPOLICY_UNION += \
+    file.te \
     file_contexts \
     fs_use \
     seapp_contexts \