diff --git a/domain.te b/domain.te
index 03528a38db611439a2582071cd64d699a9349c49..105072556c73a10900abe5c47d172de89ef27cde 100644
--- a/domain.te
+++ b/domain.te
@@ -22,6 +22,7 @@ allow domain self:process {
     setrlimit
 };
 allow domain self:fd use;
+allow domain proc:dir search;
 allow domain self:dir r_dir_perms;
 allow domain self:lnk_file r_file_perms;
 allow domain self:{ fifo_file file } rw_file_perms;
@@ -96,6 +97,7 @@ allow domain proc:lnk_file read;
 # toybox loads libselinux which stats /sys/fs/selinux/
 allow domain selinuxfs:file getattr;
 allow domain sysfs:dir search;
+allow domain selinuxfs:filesystem getattr;
 
 ###
 ### neverallow rules