diff --git a/adbd.te b/adbd.te
index 2e47fb62dceaa62b2abbf1a9398e2f1f64d50175..de6b1f99dc438d958639cc6849a0f9280a48b2cc 100644
--- a/adbd.te
+++ b/adbd.te
@@ -38,6 +38,10 @@ allow adbd shell_data_file:file create_file_perms;
 allow adbd sdcard_type:dir create_dir_perms;
 allow adbd sdcard_type:file create_file_perms;
 
+# adb pull /data/anr/traces.txt
+allow adbd anr_data_file:dir r_dir_perms;
+allow adbd anr_data_file:file r_file_perms;
+
 # Set service.adb.*, sys.powerctl properties.
 unix_socket_connect(adbd, property, init)
 allow adbd shell_prop:property_service set;
diff --git a/shell.te b/shell.te
index 94ad762db5d8eecd58915e516b209809eefed478..50cc4f5236f26f23bad9221913f12f3406addbc8 100644
--- a/shell.te
+++ b/shell.te
@@ -13,4 +13,8 @@ app_domain(shell)
 read_logd(shell)
 control_logd(shell)
 
+# read files in /data/anr
+allow shell anr_data_file:dir r_dir_perms;
+allow shell anr_data_file:file r_file_perms;
+
 # inherits from shelldomain.te