diff --git a/private/priv_app.te b/private/priv_app.te
index 60fb411096bc661d8767297cca9dc7614b07146d..f4cfc17369e04d44ad27b73c3301c68bc7a11837 100644
--- a/private/priv_app.te
+++ b/private/priv_app.te
@@ -114,6 +114,9 @@ read_runtime_log_tags(priv_app)
 
 # suppress denials when safetynet scans /system
 dontaudit priv_app exec_type:file getattr;
+dontaudit priv_app device:dir read;
+dontaudit priv_app proc_interrupts:file read;
+dontaudit priv_app proc_modules:file read;
 
 ###
 ### neverallow rules