diff --git a/mediaserver.te b/mediaserver.te
index 257c1c2..33fd267 100644
--- a/mediaserver.te
+++ b/mediaserver.te
@@ -9,6 +9,12 @@
 
 r_dir_file(mediaserver, sdcard_type)
 
+# stat /proc/self
+allow mediaserver proc:lnk_file getattr;
+
+# open /vendor/lib/mediadrm
+allow mediaserver system_file:dir r_dir_perms;
+
 binder_use(mediaserver)
 binder_call(mediaserver, binderservicedomain)
 binder_call(mediaserver, { appdomain autoplay_app })