diff --git a/kernel.te b/kernel.te
index ca01bbf621be30368807113bf4cd4ea1fff4ef64..422edc9e5ad89b911456bbbd2dd2103fa2712f9a 100644
--- a/kernel.te
+++ b/kernel.te
@@ -35,7 +35,7 @@ dontaudit kernel self:security setenforce;
 allow kernel self:security setcheckreqprot;
 
 # MTP sync
-allow kernel sdcard_internal:file write;
+allow kernel sdcard_internal:file { read write };
 
 ###
 ### neverallow rules