diff --git a/system_server.te b/system_server.te
index a8b37f37f131647ef4f7a7cbd9649f6da72f36d3..0ea72032a9910a83fcd3a4b6c3d57268350bc0f2 100644
--- a/system_server.te
+++ b/system_server.te
@@ -397,7 +397,7 @@ allow system_server frp_block_device:blk_file rw_file_perms;
 allow system_server cgroup:dir { remove_name rmdir };
 
 # /oem access
-allow system_server oemfs:dir search;
+r_dir_file(system_server, oemfs)
 
 ###
 ### Neverallow rules