diff --git a/private/service_contexts b/private/service_contexts
index 43d05521b55c73bd45a766fc35cd9d521dfdd4fa..76a852b14f5380f13f97f00a42b098278b3779fc 100644
--- a/private/service_contexts
+++ b/private/service_contexts
@@ -29,6 +29,7 @@ consumer_ir                               u:object_r:consumer_ir_service:s0
 content                                   u:object_r:content_service:s0
 contexthub_service                        u:object_r:contexthub_service:s0
 country_detector                          u:object_r:country_detector_service:s0
+coverage                                  u:object_r:coverage_service:s0
 cpuinfo                                   u:object_r:cpuinfo_service:s0
 dbinfo                                    u:object_r:dbinfo_service:s0
 device_policy                             u:object_r:device_policy_service:s0
diff --git a/public/service.te b/public/service.te
index d1be52d21a7b286d25d4a6f4a16d6470340fe4f8..550f79bb7909d91069d7b86bf81dae755fd877e0 100644
--- a/public/service.te
+++ b/public/service.te
@@ -48,6 +48,9 @@ type connmetrics_service, app_api_service, system_server_service, service_manage
 type consumer_ir_service, app_api_service, system_server_service, service_manager_type;
 type content_service, app_api_service, system_server_service, service_manager_type;
 type country_detector_service, app_api_service, system_server_service, service_manager_type;
+# Note: The coverage_service should only be enabled for userdebug / eng builds that were compiled
+# with EMMA_INSTRUMENT=true. We should consider locking this down in the future.
+type coverage_service, system_server_service, service_manager_type;
 type cpuinfo_service, system_api_service, system_server_service, service_manager_type;
 type dbinfo_service, system_api_service, system_server_service, service_manager_type;
 type device_policy_service, app_api_service, system_server_service, service_manager_type;