diff --git a/system_server.te b/system_server.te
index e55a43551c5e62074bb922ad753a4cfd0b192e58..97d159d87c83271e4c53088c5da5c79ba29602c3 100644
--- a/system_server.te
+++ b/system_server.te
@@ -391,7 +391,7 @@ allow system_server frp_block_device:blk_file rw_file_perms;
 allow system_server cgroup:dir { remove_name rmdir };
 
 # /oem access
-allow system_server oemfs:dir search;
+r_dir_file(system_server, oemfs)
 
 ###
 ### Neverallow rules