diff --git a/private/system_server.te b/private/system_server.te
index f70744d1c..1e799328e 100644
--- a/private/system_server.te
+++ b/private/system_server.te
@@ -787,6 +787,9 @@ get_prop(system_server, packagemanager_config_prop)
 # Read the net.464xlat.cellular.enabled property (written by init).
 get_prop(system_server, net_464xlat_fromvendor_prop)
 
+# Read hypervisor capabilities ro.boot.hypervisor.*
+get_prop(system_server, hypervisor_prop)
+
 # Create a socket for connections from debuggerd.
 allow system_server system_ndebug_socket:sock_file create_file_perms;