diff --git a/system_server.te b/system_server.te
index eae67ed91a9de330aaeedbca9ae8629956e0a922..7050980cc8f52acf83708b5c8f49d53c1aa454e7 100644
--- a/system_server.te
+++ b/system_server.te
@@ -441,7 +441,7 @@ userdebug_or_eng(`
 
 # For AppFuse.
 allow system_server vold:fd use;
-allow system_server fuse_device:chr_file { read write ioctl };
+allow system_server fuse_device:chr_file { read write ioctl getattr };
 
 # Connect to adbd and use a socket transferred from it.
 # Used for e.g. jdwp.