diff --git a/system_server.te b/system_server.te
index 2bb21a37b18f3e66f8efea71d9adbfa140eddcd1..e8c52ff977137b02270ce2051fa3a082fd236098 100644
--- a/system_server.te
+++ b/system_server.te
@@ -457,7 +457,7 @@ userdebug_or_eng(`
 
 # For AppFuse.
 allow system_server vold:fd use;
-allow system_server fuse_device:chr_file { read write ioctl };
+allow system_server fuse_device:chr_file { read write ioctl getattr };
 
 # Connect to adbd and use a socket transferred from it.
 # Used for e.g. jdwp.