diff --git a/private/mediaprovider.te b/private/mediaprovider.te
index 5a5e701bf471f965a6ec08a14734ce5212d4d313..2c4a8094aa2051d757939785942cec63400fbfa2 100644
--- a/private/mediaprovider.te
+++ b/private/mediaprovider.te
@@ -14,6 +14,11 @@ allow mediaprovider cache_file:dir create_dir_perms;
 allow mediaprovider cache_file:file create_file_perms;
 # /cache is a symlink to /data/cache on some devices. Allow reading the link.
 allow mediaprovider cache_file:lnk_file r_file_perms;
+# mediaprovider searches through /cache looking for orphans
+# Ignore denials to /cache/recovery and /cache/backup.
+dontaudit mediaprovider cache_private_backup_file:dir getattr;
+dontaudit mediaprovider cache_recovery_file:dir getattr;
+
 
 allow mediaprovider app_api_service:service_manager find;
 allow mediaprovider audioserver_service:service_manager find;