diff --git a/drmserver.te b/drmserver.te
index 19931766e..b4d741625 100644
--- a/drmserver.te
+++ b/drmserver.te
@@ -46,3 +46,6 @@ allow drmserver asec_apk_file:file { read getattr };
 allow drmserver radio_data_file:file { read getattr };
 
 allow drmserver drmserver_service:service_manager add;
+
+# /oem access
+allow drmserver oemfs:file r_file_perms;
diff --git a/mediaserver.te b/mediaserver.te
index 55d1f2053..4d5657241 100644
--- a/mediaserver.te
+++ b/mediaserver.te
@@ -79,3 +79,6 @@ unix_socket_connect(mediaserver, bluetooth, bluetooth)
 allow mediaserver tee:unix_stream_socket connectto;
 
 allow mediaserver mediaserver_service:service_manager add;
+
+# /oem access
+allow mediaserver oemfs:file r_file_perms;