diff --git a/domain.te b/domain.te
index 9336644afeb47f7d8d7b1b42ea51395c4ce96ee8..439bde70b5245a3aa178043355f948ba10bc7eea 100644
--- a/domain.te
+++ b/domain.te
@@ -5,7 +5,7 @@ allow domain init:process sigchld;
 
 # Read access to properties mapping.
 allow domain kernel:fd use;
-allow domain tmpfs:file read;
+allow domain tmpfs:file { read getattr };
 
 # binder adjusts the nice value during IPC.
 allow domain self:capability sys_nice;