diff --git a/public/domain.te b/public/domain.te
index 2111d5718400d96f24522a7f37c20a40925728ac..d705cd7e45280da1fb16095a7f51040a2f36001d 100644
--- a/public/domain.te
+++ b/public/domain.te
@@ -143,8 +143,8 @@ full_treble_only(`
     allow { domain -coredomain } vendor_file_type:lnk_file { getattr read };
 ')
 
-# read any sysfs symlinks
-allow domain sysfs:lnk_file read;
+# read and stat any sysfs symlinks
+allow domain sysfs:lnk_file { getattr read };
 
 # libc references /data/misc/zoneinfo for timezone related information
 # This directory is considered to be a VNDK-stable