diff --git a/public/mediaextractor.te b/public/mediaextractor.te
index e1b460d65d3c12b15ef4fbea269a6fe3898235bf..94824b75e8fa8a063d84e533cf0cc4b2100d96bd 100644
--- a/public/mediaextractor.te
+++ b/public/mediaextractor.te
@@ -22,6 +22,7 @@ crash_dump_fallback(mediaextractor)
 
 # allow mediaextractor read permissions for file sources
 allow mediaextractor media_rw_data_file:file { getattr read };
+allow mediaextractor app_data_file:file { getattr read };
 
 # Read resources from open apk files passed over Binder
 allow mediaextractor apk_data_file:file { read getattr };