diff --git a/public/dex2oat.te b/public/dex2oat.te
index 6421d930ca317378575ed4d303337aa5dda8a3c4..4ae45ca294af9c810d7da45d5cf4eed5628e7750 100644
--- a/public/dex2oat.te
+++ b/public/dex2oat.te
@@ -19,7 +19,8 @@ allow dex2oat installd:fd use;
 allow dex2oat asec_apk_file:file read;
 allow dex2oat unlabeled:file read;
 allow dex2oat oemfs:file read;
-allow dex2oat apk_tmp_file:file read;
+allow dex2oat apk_tmp_file:dir search;
+allow dex2oat apk_tmp_file:file r_file_perms;
 allow dex2oat user_profile_data_file:file { getattr read lock };
 
 # Allow dex2oat to compile app's secondary dex files which were reported back to