diff --git a/drmserver.te b/drmserver.te
index 2a146b6bb78ebc3b6498217c1f95abbc779d1156..428b3d3b9923ac0b9eb33a7b6247285ed657572d 100644
--- a/drmserver.te
+++ b/drmserver.te
@@ -47,6 +47,9 @@ allow drmserver radio_data_file:file { read getattr };
 
 allow drmserver drmserver_service:service_manager add;
 
+# /oem access
+allow drmserver oemfs:file r_file_perms;
+
 # Audited locally.
 service_manager_local_audit_domain(drmserver)
 auditallow drmserver {
diff --git a/mediaserver.te b/mediaserver.te
index 3eb078d4b0dbc9620f4e666c8d552d28fce229d8..dc94fc820ea798c475d097d143fd6fa921b5e96c 100644
--- a/mediaserver.te
+++ b/mediaserver.te
@@ -80,6 +80,9 @@ allow mediaserver tee:unix_stream_socket connectto;
 
 allow mediaserver mediaserver_service:service_manager add;
 
+# /oem access
+allow mediaserver oemfs:file r_file_perms;
+
 # Audited locally.
 service_manager_local_audit_domain(mediaserver)
 auditallow mediaserver {