diff --git a/mediaserver.te b/mediaserver.te
index 65438ba89f91f2a78a9d2c8ca673fe5cd3c3d683..d335ae80299d032a3781dc35329e4582dfac48cd 100644
--- a/mediaserver.te
+++ b/mediaserver.te
@@ -35,8 +35,7 @@ set_prop(mediaserver, audio_prop)
 allow mediaserver audio_device:chr_file rw_file_perms;
 
 # XXX Label with a specific type?
-allow mediaserver sysfs:file rw_file_perms;
-auditallow mediaserver sysfs:file { write append };
+allow mediaserver sysfs:file r_file_perms;
 
 # Read resources from open apk files passed over Binder.
 allow mediaserver apk_data_file:file { read getattr };