diff --git a/tracking_denials/tee.te b/tracking_denials/tee.te
index e20f6584..9a1070ab 100644
--- a/tracking_denials/tee.te
+++ b/tracking_denials/tee.te
@@ -1,3 +1,2 @@
-# b/205904330
-dontaudit tee tee:capability { setgid };
-dontaudit tee tee:capability { setuid };
+# TODO(b/205904330): avoid using setuid, setgid permission
+allow tee tee:capability { setuid setgid };