diff --git a/domain.te b/domain.te
index 1aa99594b295a254a6995f8511899451b7cad74c..4c35f0c8cca859b123caba0d3b066b7c3fc6d35f 100644
--- a/domain.te
+++ b/domain.te
@@ -167,7 +167,7 @@ allow domain asec_public_file:file r_file_perms;
 allow domain { asec_public_file asec_apk_file }:dir r_dir_perms;
 
 # log all access to specified system_server services
-auditallow { domain -service_manager_local_audit } tmp_system_server_service:service_manager {list find };
+auditallow { domain -shell -service_manager_local_audit } tmp_system_server_service:service_manager {list find };
 
 ###
 ### neverallow rules