diff --git a/private/system_server.te b/private/system_server.te
index 9597fde..4b965c0 100644
--- a/private/system_server.te
+++ b/private/system_server.te
@@ -927,6 +927,8 @@
 
 # Access to /dev/dma_heap/system
 allow system_server dmabuf_system_heap_device:chr_file r_file_perms;
+# Access to /dev/dma_heap/system-secure
+allow system_server dmabuf_system_secure_heap_device:chr_file r_file_perms;
 
 r_dir_file(system_server, proc_asound)
 r_dir_file(system_server, proc_net_type)