diff --git a/dumpstate.te b/dumpstate.te
index 4716ea73eb6e62bd2649110d863afe8844a83c48..115bb0949c8286f2af146a2b63bc890ab9d41ea7 100644
--- a/dumpstate.te
+++ b/dumpstate.te
@@ -137,6 +137,9 @@ control_logd(dumpstate)
 allow dumpstate net_data_file:dir search;
 allow dumpstate net_data_file:file r_file_perms;
 
+# List sockets via ss.
+allow dumpstate self:netlink_tcpdiag_socket { create_socket_perms nlmsg_read };
+
 # Access /data/tombstones.
 allow dumpstate tombstone_data_file:dir r_dir_perms;
 allow dumpstate tombstone_data_file:file r_file_perms;