diff --git a/private/system_server.te b/private/system_server.te
index 4eb2d38..de95768 100644
--- a/private/system_server.te
+++ b/private/system_server.te
@@ -189,6 +189,9 @@
 # Read /sys/kernel/ion/*.
 allow system_server sysfs_ion:file r_file_perms;
 
+# Read /sys/kernel/dma_heap/*.
+allow system_server sysfs_dma_heap:file r_file_perms;
+
 # The DhcpClient and WifiWatchdog use packet_sockets
 allow system_server self:packet_socket create_socket_perms_no_ioctl;