diff --git a/mediaserver.te b/mediaserver.te
index 057e39dc196764af0c601ec1a5c92881b34e967b..39618a5338da8717b7132b7311caa5dcdc2eb789 100644
--- a/mediaserver.te
+++ b/mediaserver.te
@@ -11,7 +11,7 @@ binder_call(mediaserver, binderservicedomain)
 binder_call(mediaserver, appdomain)
 binder_service(mediaserver)
 allow mediaserver app_data_file:dir search;
-allow mediaserver app_data_file:file { read getattr };
+allow mediaserver app_data_file:file r_file_perms;
 r_dir_file(mediaserver, sdcard)
 allow mediaserver sdcard:file write;
 allow mediaserver camera_device:chr_file rw_file_perms;