diff --git a/domain.te b/domain.te
index ba12ccd2a1b211a87310182223f93a00f1f48313..7fb223e861187c453373728b5a57319de8700b19 100644
--- a/domain.te
+++ b/domain.te
@@ -22,6 +22,7 @@ allow domain self:process {
     setrlimit
 };
 allow domain self:fd use;
+allow domain proc:dir search;
 allow domain self:dir r_dir_perms;
 allow domain self:lnk_file r_file_perms;
 allow domain self:{ fifo_file file } rw_file_perms;
@@ -96,6 +97,7 @@ allow domain proc:lnk_file read;
 # toybox loads libselinux which stats /sys/fs/selinux/
 allow domain selinuxfs:file getattr;
 allow domain sysfs:dir search;
+allow domain selinuxfs:filesystem getattr;
 
 ###
 ### neverallow rules