diff --git a/mediadrmserver.te b/mediadrmserver.te
index bd2264db85d966d2b3b778ea0fb16e247bdb4ded..8b4f073f7ef6cc1fff7ae8778cab59ce37fc5b9b 100644
--- a/mediadrmserver.te
+++ b/mediadrmserver.te
@@ -36,6 +36,7 @@ allow mediadrmserver ion_device:chr_file rw_file_perms;
 # Allow access to app_data and media_data_files
 allow mediadrmserver media_data_file:dir create_dir_perms;
 allow mediadrmserver media_data_file:file create_file_perms;
+allow mediadrmserver media_data_file:file { getattr read };
 
 allow mediadrmserver tee_device:chr_file rw_file_perms;