diff --git a/system_server.te b/system_server.te
index 8ecfe52..8b252c5 100644
--- a/system_server.te
+++ b/system_server.te
@@ -70,6 +70,9 @@
 # Use generic netlink sockets.
 allow system_server self:netlink_socket create_socket_perms;
 
+# Set and get routes directly via netlink.
+allow system_server self:netlink_route_socket nlmsg_write;
+
 # Kill apps.
 allow system_server appdomain:process { sigkill signal };