diff --git a/nfc.te b/nfc.te
index 3545e2335316797292febdbcdfedfe95d70b8b0a..de482f442710f7a3cc03efa6cdc25de6a7bafbe6 100644
--- a/nfc.te
+++ b/nfc.te
@@ -44,4 +44,9 @@ auditallow nfc {
     -trust_service
     -user_service
     -vibrator_service
-}:service_manager find;
\ No newline at end of file
+}:service_manager find;
+
+# already open bugreport file descriptors may be shared with
+# the nfc process, from a file in
+# /data/data/com.android.shell/files/bugreports/bugreport-*.
+allow nfc shell_data_file:file read;