diff --git a/public/domain.te b/public/domain.te
index e550485ee7fdcb11ade80a8a94fde20d86b570dc..5569ce127b4a396eaf29ff4bf577e470d76c11eb 100644
--- a/public/domain.te
+++ b/public/domain.te
@@ -143,8 +143,8 @@ full_treble_only(`
     allow { domain -coredomain } vendor_file_type:lnk_file { getattr read };
 ')
 
-# read any sysfs symlinks
-allow domain sysfs:lnk_file read;
+# read and stat any sysfs symlinks
+allow domain sysfs:lnk_file { getattr read };
 
 # libc references /data/misc/zoneinfo for timezone related information
 # This directory is considered to be a VNDK-stable