diff --git a/priv_app.te b/priv_app.te
index 67e91cdb238f23696a83c97d3ae59d223acf3c9f..b2b9e579a51ded534d031e6b5ed2b00f132828f8 100644
--- a/priv_app.te
+++ b/priv_app.te
@@ -70,9 +70,8 @@ userdebug_or_eng(`
   allow priv_app perfprofd_data_file:dir r_dir_perms;
 ')
 
-# Allow GMS core to stat files and executables on
-# the system partition
-allow priv_app exec_type:file getattr;
+# Allow GMS core to scan executables on the system partition
+allow priv_app exec_type:file { getattr read open };
 
 # For AppFuse.
 allow priv_app vold:fd use;