diff --git a/private/prefetch.te b/private/prefetch.te
index 21287f3..69008b5 100644
--- a/private/prefetch.te
+++ b/private/prefetch.te
@@ -22,3 +22,7 @@
   -init
   -shell
 } ctl_prefetch_prop:property_service set;
+
+# Allow rootfs so prefetch can walk through directory tree and
+# create a map of inodes -> file path.
+allow prefetch rootfs:dir { open read search getattr };