diff --git a/public/mediaserver.te b/public/mediaserver.te
index 6a7b0c7a4048e49407e43f8b0a5dc60696adc380..540c039efbed70895905829bccb7cdbd5c7448aa 100644
--- a/public/mediaserver.te
+++ b/public/mediaserver.te
@@ -92,7 +92,7 @@ allow mediaserver oemfs:dir search;
 allow mediaserver oemfs:file r_file_perms;
 
 # /vendor apk access
-allow mediaserver vendor_app_file:file { read map };
+allow mediaserver vendor_app_file:file { read map getattr };
 
 use_drmservice(mediaserver)
 allow mediaserver drmserver:drmservice {