diff --git a/public/kernel.te b/public/kernel.te
index 99ad01404..46864b819 100644
--- a/public/kernel.te
+++ b/public/kernel.te
@@ -106,6 +106,9 @@ recovery_only(`
   allow kernel rootfs:file execute;
 ')
 
+# required by VTS lidbm unit test
+allow kernel appdomain_tmpfs:file read;
+
 ###
 ### neverallow rules
 ###