diff --git a/private/priv_app.te b/private/priv_app.te
index dc1690c4607283644e0f92fd5e27d9d9efd9fe2c..95ef3e82b0e820d99b7df1151d0cc733e367756d 100644
--- a/private/priv_app.te
+++ b/private/priv_app.te
@@ -38,6 +38,8 @@ allow priv_app recovery_service:service_manager find;
 # Write to /cache.
 allow priv_app { cache_file cache_recovery_file }:dir create_dir_perms;
 allow priv_app { cache_file cache_recovery_file }:file create_file_perms;
+# /cache is a symlink to /data/cache on some devices. Allow reading the link.
+allow priv_app cache_file:lnk_file r_file_perms;
 
 # Write to /data/ota_package for OTA packages.
 allow priv_app ota_package_file:dir rw_dir_perms;