diff --git a/prebuilts/api/28.0/public/dumpstate.te b/prebuilts/api/28.0/public/dumpstate.te
index f3cd8929624b61eb2ca3ee8d3e60d26fcd5cdd00..03fc737eb38910316c4ac218284873402d5f84ee 100644
--- a/prebuilts/api/28.0/public/dumpstate.te
+++ b/prebuilts/api/28.0/public/dumpstate.te
@@ -100,6 +100,7 @@ allow dumpstate debugfs:file r_file_perms;
 allow dumpstate {
   block_device
   cache_file
+  metadata_file
   rootfs
   selinuxfs
   storage_file
diff --git a/public/dumpstate.te b/public/dumpstate.te
index f3cd8929624b61eb2ca3ee8d3e60d26fcd5cdd00..03fc737eb38910316c4ac218284873402d5f84ee 100644
--- a/public/dumpstate.te
+++ b/public/dumpstate.te
@@ -100,6 +100,7 @@ allow dumpstate debugfs:file r_file_perms;
 allow dumpstate {
   block_device
   cache_file
+  metadata_file
   rootfs
   selinuxfs
   storage_file