diff --git a/app.te b/app.te
index ad9cffe118bee271ecc98ce2afb260a463e89612..6c38f10e36475625d2154e08caf54bba93ffa010 100644
--- a/app.te
+++ b/app.te
@@ -177,6 +177,7 @@ allow appdomain domain:process getattr;
 
 # logd access
 read_logd(appdomain)
+control_logd(appdomain)
 # application inherit logd write socket (urge is to deprecate this long term)
 allow appdomain zygote:unix_dgram_socket write;