diff --git a/cts.te b/cts.te
index 3600e944ac675ccd5572132db18601b53eb3f7af..489be1a71234583dd8ac4afe9d8c2ab6bbe54269 100644
--- a/cts.te
+++ b/cts.te
@@ -27,6 +27,10 @@ allow appdomain fs_type:dir_file_class_set getattr;
 allow appdomain shell_exec:file rx_file_perms;
 allow appdomain system_file:file rx_file_perms;
 
+# Accesses to apk_tmp_file and shell_data_file
+allow appdomain apk_tmp_file:file rw_file_perms;
+allow appdomain shell_data_file:file r_file_perms;
+
 # Read routing information.
 allow netdomain self:netlink_route_socket { create read write nlmsg_read };