diff --git a/shell.te b/shell.te
index cfadf77c93a3affd64372cb82ea1439ada825a7a..e7d03e8a46c18a4117d4577d1fcca2f16e6ae6f4 100644
--- a/shell.te
+++ b/shell.te
@@ -74,3 +74,6 @@ allow shell domain:process getattr;
 # and read other files created by init process under /data/bootchart
 allow shell bootchart_data_file:dir rw_dir_perms;
 allow shell bootchart_data_file:file create_file_perms;
+
+# Follow the /storage/self/primary symlink
+allow appdomain storage_file:lnk_file r_file_perms;