diff --git a/sepolicy/vendor/system_app.te b/sepolicy/vendor/system_app.te
index fcb9b318..170c1f87 100644
--- a/sepolicy/vendor/system_app.te
+++ b/sepolicy/vendor/system_app.te
@@ -19,6 +19,8 @@ allow system_app sysfs_earpiecegain:file rw_file_perms;
 allow system_app sysfs_zram:dir search;
 allow system_app sysfs_zram:file r_file_perms;
 allow system_app zygote:unix_stream_socket { getopt };
+allow system_app sysfs_thermal:file rw_file_perms;
+allow system_app sysfs_thermal:dir search;
 
 # neverallow and harmless
 dontaudit system_app time_daemon:unix_stream_socket { connectto };