diff --git a/private/priv_app.te b/private/priv_app.te
index 75e9732a9..dd4d5c744 100644
--- a/private/priv_app.te
+++ b/private/priv_app.te
@@ -150,6 +150,9 @@ allow priv_app system_server:udp_socket {
 # the Incremental File System
 allowxperm priv_app apk_data_file:file ioctl INCFS_IOCTL_READ_SIGNATURE;
 
+# allow privileged data loader apps (e.g. com.android.vending) to read logs from Incremental File System
+allow priv_app incremental_control_file:file { read getattr };
+
 ###
 ### neverallow rules
 ###