diff --git a/public/domain.te b/public/domain.te
index 7e1d6c280c06039edb1f4c6198cd62c3b1124a9f..5b1f1a889f471dc108bdd9890a70bfc0200e8290 100644
--- a/public/domain.te
+++ b/public/domain.te
@@ -143,8 +143,8 @@ full_treble_only(`
     allow { domain -coredomain } vendor_file_type:lnk_file { getattr read };
 ')
 
-# read any sysfs symlinks
-allow domain sysfs:lnk_file read;
+# read and stat any sysfs symlinks
+allow domain sysfs:lnk_file { getattr read };
 
 # libc references /data/misc/zoneinfo for timezone related information
 # This directory is considered to be a VNDK-stable