diff --git a/public/mediaextractor.te b/public/mediaextractor.te
index 398d413b2e9b2dbc2587ced33bb4836b27001b6f..969c1a570e5764c829bc09047a471e75bc7dee48 100644
--- a/public/mediaextractor.te
+++ b/public/mediaextractor.te
@@ -20,6 +20,9 @@ allow mediaextractor proc_meminfo:file r_file_perms;
 
 crash_dump_fallback(mediaextractor)
 
+# allow mediaextractor read permissions for file sources
+allow mediaextractor media_rw_data_file:file { getattr read };
+
 ###
 ### neverallow rules
 ###