diff --git a/public/lmkd.te b/public/lmkd.te
index f4e6c2d57..208720ca6 100644
--- a/public/lmkd.te
+++ b/public/lmkd.te
@@ -27,6 +27,9 @@ allow lmkd appdomain:process sigkill;
 # Clean up old cgroups
 allow lmkd cgroup:dir { remove_name rmdir };
 
+# Allow to read memcg stats
+allow lmkd cgroup:file r_file_perms;
+
 # Set self to SCHED_FIFO
 allow lmkd self:capability sys_nice;