diff --git a/sepolicy/file.te b/sepolicy/file.te
index 3a20199c..ddf15b9c 100644
--- a/sepolicy/file.te
+++ b/sepolicy/file.te
@@ -2,3 +2,6 @@
 allow file_type rootfs:filesystem associate;
 
 type auditd_log, file_type;
+
+# Themes
++type theme_data_file, file_type, data_file_type;
\ No newline at end of file
diff --git a/sepolicy/file_contexts b/sepolicy/file_contexts
index c179f1eb..983f911a 100644
--- a/sepolicy/file_contexts
+++ b/sepolicy/file_contexts
@@ -4,6 +4,9 @@
 /system/bin/auditd        u:object_r:logd_exec:s0
 /data/misc/audit(/.*)?    u:object_r:auditd_log:s0
 
+# Themes
+/data/system/theme(/.*)?  u:object_r:theme_data_file:s0
+
 /system/bin/sysinit       u:object_r:sysinit_exec:s0
 
 # For minivold in recovery
diff --git a/sepolicy/system.te b/sepolicy/system.te
index ca07e6fb..b969f47e 100644
--- a/sepolicy/system.te
+++ b/sepolicy/system.te
@@ -6,3 +6,9 @@ allow system_server adbtcp_prop:property_service set;
 
 allow system_server dhcp_data_file:dir r_dir_perms;
 allow system_server dhcp_data_file:file r_file_perms;
+
+# Themes
+allow system_server theme_data_file:dir create_dir_perms;
+allow system_server theme_data_file:file create_file_perms;
+allow system_server resourcecache_data_file:dir create_dir_perms;
+allow system_server resourcecache_data_file:file create_file_perms;