diff --git a/system_server.te b/system_server.te
index 2afafa6e1944b6f09d138f0d33b370f7e05943af..0b1ec45b726e85481d450bae90cf16c49f9174a7 100644
--- a/system_server.te
+++ b/system_server.te
@@ -13,6 +13,10 @@ allow system_server zygote:fd use;
 allow system_server zygote:process sigchld;
 allow system_server zygote_tmpfs:file read;
 
+# Needed to close the zygote socket, which involves getopt / getattr
+# This should be deleted after b/12061011 is fixed
+allow system_server zygote:unix_stream_socket { getopt getattr };
+
 # system server gets network and bluetooth permissions.
 net_domain(system_server)
 bluetooth_domain(system_server)