diff --git a/private/compat/26.0/26.0.cil b/private/compat/26.0/26.0.cil
index a791009c9d129aaf90f641ba44037e966dad89b8..2a32f141e0ada50d603c5d67465582d4c7dd1244 100644
--- a/private/compat/26.0/26.0.cil
+++ b/private/compat/26.0/26.0.cil
@@ -569,6 +569,7 @@
     sysfs_android_usb
     sysfs_dm
     sysfs_ipv4
+    sysfs_net
     sysfs_power
     sysfs_rtc
     sysfs_switch
diff --git a/private/genfs_contexts b/private/genfs_contexts
index 5b0f3c7e28a0895a28465b661353cd82add13d06..7bf252dc1fafb8bed538a4bb64600c87b9cb3f92 100644
--- a/private/genfs_contexts
+++ b/private/genfs_contexts
@@ -71,6 +71,7 @@ genfscon sysfs /devices/virtual/block/zram1     u:object_r:sysfs_zram:s0
 genfscon sysfs /devices/virtual/block/zram0/uevent    u:object_r:sysfs_zram_uevent:s0
 genfscon sysfs /devices/virtual/block/zram1/uevent    u:object_r:sysfs_zram_uevent:s0
 genfscon sysfs /devices/virtual/misc/hw_random    u:object_r:sysfs_hwrandom:s0
+genfscon sysfs /devices/virtual/net             u:object_r:sysfs_net:s0
 genfscon sysfs /devices/virtual/switch          u:object_r:sysfs_switch:s0
 genfscon sysfs /fs/ext4/features                  u:object_r:sysfs_fs_ext4_features:s0
 genfscon sysfs /power/state u:object_r:sysfs_power:s0
diff --git a/public/file.te b/public/file.te
index 435b8523835100290efc48f537c3343d36372676..323198a8f76c6e829b5ee14d4f8d8064a011f112 100644
--- a/public/file.te
+++ b/public/file.te
@@ -55,6 +55,7 @@ type sysfs_hwrandom, fs_type, sysfs_type;
 type sysfs_nfc_power_writable, fs_type, sysfs_type, mlstrustedobject;
 type sysfs_wake_lock, fs_type, sysfs_type;
 type sysfs_mac_address, fs_type, sysfs_type;
+type sysfs_net, fs_type, sysfs_type;
 type sysfs_power, fs_type, sysfs_type;
 type sysfs_rtc, fs_type, sysfs_type;
 type sysfs_switch, fs_type, sysfs_type;
diff --git a/public/netd.te b/public/netd.te
index aa99da21a8a61f3a4b74309469d42f14568aeb34..a1917b3734bc48073ae6fee1bfe46c6e2b379821 100644
--- a/public/netd.te
+++ b/public/netd.te
@@ -38,9 +38,11 @@ r_dir_file(netd, proc_net)
 allow netd proc_net:file rw_file_perms;
 
 # Enables PppController and interface enumeration (among others)
-r_dir_file(netd, sysfs_type)
+allow netd sysfs:dir r_dir_perms;
+r_dir_file(netd, sysfs_net)
+
 # Allows setting interface MTU
-allow netd sysfs:file write;
+allow netd sysfs_net:file w_file_perms;
 
 # TODO: added to match above sysfs rule. Remove me?
 allow netd sysfs_usb:file write;