diff --git a/untrusted_app.te b/untrusted_app.te
index 7a9e2dd..4e783f1 100644
--- a/untrusted_app.te
+++ b/untrusted_app.te
@@ -111,6 +111,11 @@
   allow untrusted_app perfprofd_data_file:file r_file_perms;
   allow untrusted_app perfprofd_data_file:dir r_dir_perms;
 ')
+
+# Programs routinely attempt to scan through /system, looking
+# for files. Suppress the denials when they occur.
+dontaudit untrusted_app exec_type:file getattr;
+
 ###
 ### neverallow rules
 ###