diff --git a/private/domain.te b/private/domain.te
index 4015cf93b3ad09e97bcc87cc0e9921379804e3fe..66fb640240f58cb1368ef0c4a03425b1a899afb6 100644
--- a/private/domain.te
+++ b/private/domain.te
@@ -40,7 +40,6 @@ full_treble_only(`
     -dumpstate
     -healthd
     -init
-    -mediaserver
     -priv_app
     -storaged
     -system_app
diff --git a/public/mediaserver.te b/public/mediaserver.te
index 6efaf0fdf4d640578345f64472a46eb1872796b9..f0c94edc0ba89f2cd8c6ad55fa7b42db7b439070 100644
--- a/public/mediaserver.te
+++ b/public/mediaserver.te
@@ -39,9 +39,6 @@ allow mediaserver video_device:chr_file rw_file_perms;
 
 set_prop(mediaserver, audio_prop)
 
-# XXX Label with a specific type?
-allow mediaserver sysfs:file r_file_perms;
-
 # Read resources from open apk files passed over Binder.
 allow mediaserver apk_data_file:file { read getattr };
 allow mediaserver asec_apk_file:file { read getattr };