diff --git a/private/genfs_contexts b/private/genfs_contexts
index c2cfa2cceff4a8a38cd571fdd00ed342a94241f4..5c5dd8938db9a715a274fb387cd8304232caa21f 100644
--- a/private/genfs_contexts
+++ b/private/genfs_contexts
@@ -40,6 +40,7 @@ genfscon proc /uid_cputime/show_uid_stat u:object_r:proc_uid_cputime_showstat:s0
 genfscon proc /uid_cputime/remove_uid_range u:object_r:proc_uid_cputime_removeuid:s0
 genfscon proc /uid_io/stats u:object_r:proc_uid_io_stats:s0
 genfscon proc /uid_procstat/set u:object_r:proc_uid_procstat_set:s0
+genfscon proc /uid_time_in_state u:object_r:proc_uid_time_in_state:s0
 genfscon proc /zoneinfo u:object_r:proc_zoneinfo:s0
 
 # selinuxfs booleans can be individually labeled.
diff --git a/private/system_server.te b/private/system_server.te
index 7b95600278207bd1b63172c8553004e36e0fdff4..6f1579bf8734abf13b9b16bed374d46fd5cda0e9 100644
--- a/private/system_server.te
+++ b/private/system_server.te
@@ -126,6 +126,9 @@ allow system_server proc_uid_cputime_removeuid:file { w_file_perms getattr };
 # Write /proc/uid_procstat/set.
 allow system_server proc_uid_procstat_set:file { w_file_perms getattr };
 
+# Read /proc/uid_time_in_state.
+allow system_server proc_uid_time_in_state:file r_file_perms;
+
 # Write to /proc/sysrq-trigger.
 allow system_server proc_sysrq:file rw_file_perms;
 
diff --git a/public/file.te b/public/file.te
index 7e11c642a9ae92ceeba5cfc7ef77d4b7822ddc5c..437c361e6b6d2682a21baad7c52b231c5b154088 100644
--- a/public/file.te
+++ b/public/file.te
@@ -28,6 +28,7 @@ type proc_uid_cputime_showstat, fs_type;
 type proc_uid_cputime_removeuid, fs_type;
 type proc_uid_io_stats, fs_type;
 type proc_uid_procstat_set, fs_type;
+type proc_uid_time_in_state, fs_type;
 type proc_zoneinfo, fs_type;
 type selinuxfs, fs_type, mlstrustedobject;
 type cgroup, fs_type, mlstrustedobject;