diff --git a/adbd.te b/adbd.te
index 704b7bdf0dc87f15a1c0010b5c578d980291c0bd..d287934a5802dd0bd9561c4d39b6e1e38c71f984 100644
--- a/adbd.te
+++ b/adbd.te
@@ -39,6 +39,10 @@ allow adbd shell_data_file:file create_file_perms;
 allow adbd sdcard_type:dir create_dir_perms;
 allow adbd sdcard_type:file create_file_perms;
 
+# adb pull /data/anr/traces.txt
+allow adbd anr_data_file:dir r_dir_perms;
+allow adbd anr_data_file:file r_file_perms;
+
 # Set service.adb.*, sys.powerctl properties.
 unix_socket_connect(adbd, property, init)
 allow adbd shell_prop:property_service set;
diff --git a/shell.te b/shell.te
index 94ad762db5d8eecd58915e516b209809eefed478..50cc4f5236f26f23bad9221913f12f3406addbc8 100644
--- a/shell.te
+++ b/shell.te
@@ -13,4 +13,8 @@ app_domain(shell)
 read_logd(shell)
 control_logd(shell)
 
+# read files in /data/anr
+allow shell anr_data_file:dir r_dir_perms;
+allow shell anr_data_file:file r_file_perms;
+
 # inherits from shelldomain.te