diff --git a/mediaserver.te b/mediaserver.te
index 63dd6706a017ad9aa0d6c6fb9f1f8de490e798fa..7c180cb52b360b1fe6b1f6a48da9f27863d58a97 100644
--- a/mediaserver.te
+++ b/mediaserver.te
@@ -35,8 +35,7 @@ set_prop(mediaserver, audio_prop)
 allow mediaserver audio_device:chr_file rw_file_perms;
 
 # XXX Label with a specific type?
-allow mediaserver sysfs:file rw_file_perms;
-auditallow mediaserver sysfs:file { write append };
+allow mediaserver sysfs:file r_file_perms;
 
 # Read resources from open apk files passed over Binder.
 allow mediaserver apk_data_file:file { read getattr };