diff --git a/native/src/sepolicy/rules.rs b/native/src/sepolicy/rules.rs
index f34c315cb..c4007a197 100644
--- a/native/src/sepolicy/rules.rs
+++ b/native/src/sepolicy/rules.rs
@@ -111,6 +111,8 @@ impl SepolicyMagisk for sepolicy {
             // For relabelling files
             allow(["rootfs"], ["labeledfs", "tmpfs"], ["filesystem"], ["associate"]);
             allow([file], ["pipefs", "devpts"], ["filesystem"], ["associate"]);
+            allow(["kernel"], all, ["file"], ["relabelto"]);
+            allow(["kernel"], ["tmpfs"], ["file"], ["relabelfrom"]);
 
             // Let init transit to SEPOL_PROC_DOMAIN
             allow(["kernel"], ["kernel"], ["process"], ["setcurrent"]);