diff --git a/private/system_server.te b/private/system_server.te
index eff8e8f..df24104 100644
--- a/private/system_server.te
+++ b/private/system_server.te
@@ -725,6 +725,11 @@
   allow system_server zygote_exec:file rx_file_perms;
 ')
 
+# allow system_server to read the eBPF maps that stores the traffic stats information amd clean up
+# the map after snapshot is recorded
+allow system_server fs_bpf:file write;
+allow system_server netd:bpf { map_read map_write };
+
 # ART Profiles.
 # Allow system_server to open profile snapshots for read.
 # System server never reads the actual content. It passes the descriptor to