diff --git a/mediaserver.te b/mediaserver.te
index 257c1c27099d322065f12a27a2e221d4c54f7a50..33fd2673722a3e0dfb3dd8e40947e4d941fd79d7 100644
--- a/mediaserver.te
+++ b/mediaserver.te
@@ -9,6 +9,12 @@ init_daemon_domain(mediaserver)
 
 r_dir_file(mediaserver, sdcard_type)
 
+# stat /proc/self
+allow mediaserver proc:lnk_file getattr;
+
+# open /vendor/lib/mediadrm
+allow mediaserver system_file:dir r_dir_perms;
+
 binder_use(mediaserver)
 binder_call(mediaserver, binderservicedomain)
 binder_call(mediaserver, { appdomain autoplay_app })