diff --git a/private/virtualizationservice.te b/private/virtualizationservice.te
index 14662fa..c11fac5 100644
--- a/private/virtualizationservice.te
+++ b/private/virtualizationservice.te
@@ -66,6 +66,9 @@
 # Allow virtualizationservice to access VM DTBO via a file created by virtualizationmanager.
 allow virtualizationservice virtualizationmanager:fd use;
 
+# Allow virtualizationservice to access vendor_configs_file to get the list of assignable devices.
+r_dir_file(virtualizationservice, vendor_configs_file)
+
 neverallow {
   domain
   -init