diff --git a/public/fastbootd.te b/public/fastbootd.te
index 4b79b6446183bf36b0ea4a915dc0cce8ad4a9233..1d77fd16b39d90025d730a638194dd6008faa185 100644
--- a/public/fastbootd.te
+++ b/public/fastbootd.te
@@ -61,8 +61,13 @@ recovery_only(`
 
   allow fastbootd proc_cmdline:file r_file_perms;
   allow fastbootd rootfs:dir r_dir_perms;
+
+  # Needed to read fstab node from device tree.
   allow fastbootd sysfs_dt_firmware_android:file r_file_perms;
+  allow fastbootd sysfs_dt_firmware_android:dir r_dir_perms;
 
+  # Needed for realpath() call to resolve symlinks.
+  allow fastbootd block_device:dir getattr;
   userdebug_or_eng(`
     # Refined manipulation of /mnt/scratch, without these perms resorts
     # to deleting scratch partition when partition(s) are flashed.