diff --git a/ambient/exo_app.te b/ambient/exo_app.te
index a66e9413..a901a197 100644
--- a/ambient/exo_app.te
+++ b/ambient/exo_app.te
@@ -1,6 +1,7 @@
-type exo_app, domain;
+type exo_app, coredomain, domain;
 
 app_domain(exo_app)
+net_domain(exo_app)
 
 allow exo_app app_api_service:service_manager find;
 allow exo_app audioserver_service:service_manager find;
@@ -8,4 +9,6 @@ allow exo_app cameraserver_service:service_manager find;
 allow exo_app mediaserver_service:service_manager find;
 allow exo_app radio_service:service_manager find;
 allow exo_app fwk_stats_hwservice:hwservice_manager find;
+allow exo_app mediametrics_service:service_manager find;
+
 binder_call(exo_app, statsd)
diff --git a/ambient/seapp_contexts b/ambient/seapp_contexts
index 2bfdde8e..4ee10805 100644
--- a/ambient/seapp_contexts
+++ b/ambient/seapp_contexts
@@ -1,5 +1,5 @@
 # Domain for Exo app
-user=_app isPrivApp=true seinfo=platform name=com.google.pixel.exo domain=exo_app type=app_data_file levelFrom=all
+user=_app seinfo=platform name=com.google.pixel.exo domain=exo_app type=app_data_file levelFrom=all
 
 # Domain for Exo Wirecutter app
 user=_app seinfo=wirecutter name=com.google.pixel.wirecutter domain=exo_wirecutter_app type=app_data_file levelFrom=all