diff --git a/installd.te b/installd.te
index 68a0d068cf96364d8a621867cd0280cb64687036..f8d30b779486e13c9a120a5cd4b30f714400072b 100644
--- a/installd.te
+++ b/installd.te
@@ -16,7 +16,7 @@ allow installd apk_data_file:file r_file_perms;
 allow installd apk_tmp_file:file r_file_perms;
 allow installd system_file:file x_file_perms;
 allow installd cgroup:dir create_dir_perms;
-allow installd download_file:dir { read getattr };
+allow installd download_file:dir { r_dir_perms };
 dontaudit installd self:capability sys_admin;
 # Check validity of SELinux context before use.
 selinux_check_context(installd)