diff --git a/public/domain.te b/public/domain.te
index 10e62b82af904dbeb542a35eaf1eec8a16125fdc..b8004ac945c1d8b3516bc4faf9656b76ae1aaa80 100644
--- a/public/domain.te
+++ b/public/domain.te
@@ -92,7 +92,7 @@ write_logd(domain)
 # System file accesses.
 allow domain system_file:dir { search getattr };
 allow domain system_file:file { execute read open getattr };
-allow domain system_file:lnk_file read;
+allow domain system_file:lnk_file { getattr read };
 
 # read any sysfs symlinks
 allow domain sysfs:lnk_file read;