diff --git a/private/aconfigd.te b/private/aconfigd.te
index 60559fc20..97e7493a3 100644
--- a/private/aconfigd.te
+++ b/private/aconfigd.te
@@ -37,3 +37,7 @@ allow aconfigd kmsg_device:chr_file w_file_perms;
 # allow aconfigd to read vendor partition storage files
 allow aconfigd vendor_aconfig_storage_file:file r_file_perms;
 allow aconfigd vendor_aconfig_storage_file:dir r_dir_perms;
+
+# allow aconfigd to read /apex dir
+allow aconfigd apex_mnt_dir:dir r_dir_perms;
+allow aconfigd apex_mnt_dir:file r_file_perms;