diff --git a/public/domain.te b/public/domain.te
index 8bdd54804cbf02e9d429e828bdb8ed3e1d3900cc..e2ffb88f645da22208bad2069272ad7cef6070c5 100644
--- a/public/domain.te
+++ b/public/domain.te
@@ -55,7 +55,7 @@ userdebug_or_eng(`
 
 # Root fs.
 allow domain rootfs:dir search;
-allow domain rootfs:lnk_file read;
+allow domain rootfs:lnk_file { read getattr };
 
 # Device accesses.
 allow domain device:dir search;