diff --git a/private/system_app.te b/private/system_app.te
index e160ff4..c2dc2d1 100644
--- a/private/system_app.te
+++ b/private/system_app.te
@@ -153,6 +153,9 @@
 allow system_app system_server:udp_socket {
         connect getattr read recvfrom sendto write getopt setopt };
 
+# Settings app reads ro.oem_unlock_supported
+get_prop(system_app, oem_unlock_prop)
+
 ###
 ### Neverallow rules
 ###