diff --git a/public/dex2oat.te b/public/dex2oat.te
index 4551e589c009960c8084eec35ea0c1510be13123..cc8111fdc99f8d9061b9afff1cdcfe9e0972a79c 100644
--- a/public/dex2oat.te
+++ b/public/dex2oat.te
@@ -43,6 +43,7 @@ allow dex2oat app_data_file:file { getattr read write lock };
 allow dex2oat postinstall_dexopt:fd use;
 
 allow dex2oat postinstall_file:dir { getattr search };
+allow dex2oat postinstall_file:filesystem getattr;
 allow dex2oat postinstall_file:lnk_file read;
 
 # Allow dex2oat access to files in /data/ota.
diff --git a/public/postinstall_dexopt.te b/public/postinstall_dexopt.te
index b66c9274b0171e822cc4e1bc06dc1f751419aa63..0ce617b81ade45d07b70b3b699303be16eca1582 100644
--- a/public/postinstall_dexopt.te
+++ b/public/postinstall_dexopt.te
@@ -7,6 +7,7 @@ type postinstall_dexopt, domain;
 
 allow postinstall_dexopt self:capability { chown dac_override fowner setgid setuid };
 
+allow postinstall_dexopt postinstall_file:filesystem getattr;
 allow postinstall_dexopt postinstall_file:dir { getattr search };
 allow postinstall_dexopt postinstall_file:lnk_file read;
 allow postinstall_dexopt proc:file { getattr open read };