diff --git a/private/apexd.te b/private/apexd.te
index adf6c9758f1274affc234e3fd68ba919072609af..32efb98823e41700f53dfda44debac37f0b5ef41 100644
--- a/private/apexd.te
+++ b/private/apexd.te
@@ -3,7 +3,7 @@ typeattribute apexd coredomain;
 init_daemon_domain(apexd)
 
 # Read /system/etc/security/apex_debug_key
-allow apexd apex_key_file:dir search;
+allow apexd apex_key_file:dir { search getattr };
 allow apexd apex_key_file:file r_file_perms;
 
 # Allow reading and writing of APEX files in the APEX data dir