diff --git a/system_ext/private/systemui_app.te b/system_ext/private/systemui_app.te
new file mode 100644
index 00000000..074f500f
--- /dev/null
+++ b/system_ext/private/systemui_app.te
@@ -0,0 +1,22 @@
+typeattribute systemui_app coredomain;
+app_domain(systemui_app)
+
+allow systemui_app app_api_service:service_manager find;
+allow systemui_app network_score_service:service_manager find;
+allow systemui_app overlay_service:service_manager find;
+allow systemui_app color_display_service:service_manager find;
+allow systemui_app audioserver_service:service_manager find;
+allow systemui_app cameraserver_service:service_manager find;
+allow systemui_app mediaserver_service:service_manager find;
+allow systemui_app mediaextractor_service:service_manager find;
+allow systemui_app mediametrics_service:service_manager find;
+allow systemui_app radio_service:service_manager find;
+allow systemui_app vr_manager_service:service_manager find;
+allow systemui_app nfc_service:service_manager find;
+allow systemui_app adb_service:service_manager find;
+allow systemui_app statsmanager_service:service_manager find;
+
+get_prop(systemui_app, keyguard_config_prop)
+set_prop(systemui_app, bootanim_system_prop)
+get_prop(systemui_app, qemu_hw_prop)
+
diff --git a/system_ext/public/systemui_app.te b/system_ext/public/systemui_app.te
new file mode 100644
index 00000000..cb101a63
--- /dev/null
+++ b/system_ext/public/systemui_app.te
@@ -0,0 +1 @@
+type systemui_app, domain;
diff --git a/vendor/systemui_app.te b/vendor/systemui_app.te
index 4188dc69..034dd0a5 100644
--- a/vendor/systemui_app.te
+++ b/vendor/systemui_app.te
@@ -1,23 +1,3 @@
-type systemui_app, domain, coredomain;
-app_domain(systemui_app)
-allow systemui_app app_api_service:service_manager find;
-allow systemui_app network_score_service:service_manager find;
-allow systemui_app overlay_service:service_manager find;
-allow systemui_app color_display_service:service_manager find;
-allow systemui_app audioserver_service:service_manager find;
-allow systemui_app cameraserver_service:service_manager find;
-allow systemui_app mediaserver_service:service_manager find;
-allow systemui_app mediaextractor_service:service_manager find;
-allow systemui_app mediametrics_service:service_manager find;
-allow systemui_app radio_service:service_manager find;
-allow systemui_app vr_manager_service:service_manager find;
-allow systemui_app nfc_service:service_manager find;
-allow systemui_app adb_service:service_manager find;
-
-get_prop(systemui_app, keyguard_config_prop)
-set_prop(systemui_app, bootanim_system_prop)
-get_prop(systemui_app, qemu_hw_prop)
-
 allow systemui_app pixel_battery_service_type:service_manager find;
 binder_call(systemui_app, pixel_battery_domain)