diff --git a/drmserver.te b/drmserver.te
index 19931766ebe29f59c223cdcb4c7f40258168e29a..b4d7416254a38c496c530e3e37f4944f2babdaa4 100644
--- a/drmserver.te
+++ b/drmserver.te
@@ -46,3 +46,6 @@ allow drmserver asec_apk_file:file { read getattr };
 allow drmserver radio_data_file:file { read getattr };
 
 allow drmserver drmserver_service:service_manager add;
+
+# /oem access
+allow drmserver oemfs:file r_file_perms;
diff --git a/mediaserver.te b/mediaserver.te
index 55d1f20531e05060078d7cc401f34da48d9ea5ae..4d56572412d0c44e42c64b8b2d16fa153dc209b6 100644
--- a/mediaserver.te
+++ b/mediaserver.te
@@ -79,3 +79,6 @@ unix_socket_connect(mediaserver, bluetooth, bluetooth)
 allow mediaserver tee:unix_stream_socket connectto;
 
 allow mediaserver mediaserver_service:service_manager add;
+
+# /oem access
+allow mediaserver oemfs:file r_file_perms;