diff --git a/non_plat/netd.te b/non_plat/netd.te
index 36eabde..8a09fb9 100644
--- a/non_plat/netd.te
+++ b/non_plat/netd.te
@@ -1,2 +1,6 @@
 allow netd mtkimsmddomain:fd use;
 allow netd mtkimsmddomain:{ tcp_socket udp_socket} { read write getopt setopt };
+
+# Acquire advisory lock on /system/etc/xtables.lock. If this file doesn't
+# exist, suppress the denial.
+dontaudit netd system_file:dir write;