diff --git a/data/selinux/snappy.te b/data/selinux/snappy.te
index a28a924c62..91c6f231c6 100644
--- a/data/selinux/snappy.te
+++ b/data/selinux/snappy.te
@@ -591,6 +591,7 @@ init_read_state(snappy_confine_t)
 
 # libudev
 udev_manage_pid_dirs(snappy_confine_t)
+udev_read_db(snappy_confine_t)
 
 # basic access to system info in /proc
 kernel_read_system_state(snappy_confine_t)