diff --git a/private/mediaprovider.te b/private/mediaprovider.te
index f5c9f690e49ce7d952e0d47e3d07748bc10a774b..249fee17931959f02a1f0f882840a2cdaa498c8e 100644
--- a/private/mediaprovider.te
+++ b/private/mediaprovider.te
@@ -37,6 +37,7 @@ allow mediaprovider mtp_device:chr_file rw_file_perms;
 # MtpServer uses /dev/usb-ffs/mtp
 allow mediaprovider functionfs:dir search;
 allow mediaprovider functionfs:file rw_file_perms;
+allowxperm mediaprovider functionfs:file ioctl FUNCTIONFS_ENDPOINT_DESC;
 
 # MtpServer sets sys.usb.ffs.mtp.ready
 set_prop(mediaprovider, ffs_prop)