diff --git a/drmserver.te b/drmserver.te
index ba6b5c562cde1cfd195138ba103f6bb2b7af21dc..2fbb6613ef69f3483947aca6e9f56741d263d5eb 100644
--- a/drmserver.te
+++ b/drmserver.te
@@ -23,7 +23,7 @@ allow drmserver tee_device:chr_file rw_file_perms;
 allow drmserver platform_app_data_file:file { read write getattr };
 allow drmserver { app_data_file asec_apk_file }:file { read write getattr };
 allow drmserver sdcard_type:file { read write getattr };
-allow drmserver efs_file:file { open read getattr };
+r_dir_file(drmserver, efs_file)
 
 type drmserver_socket, file_type;