diff --git a/dumpstate.te b/dumpstate.te
index 948131e6756bd16b1520a9cb4e4d122d6549d4e1..e0fe4ceb80d335bd2ac2220c37a3aa4177e25c1d 100644
--- a/dumpstate.te
+++ b/dumpstate.te
@@ -71,5 +71,5 @@ allow dumpstate self:capability sys_ptrace;
 
 # Allow the bugreport service to create a file in
 # /data/data/com.android.shell/files/bugreports/bugreport
-allow dumpstate shell_data_file:dir rw_dir_perms;
+allow dumpstate shell_data_file:dir create_dir_perms;
 allow dumpstate shell_data_file:file create_file_perms;
diff --git a/surfaceflinger.te b/surfaceflinger.te
index eb7caebefb8ec4462840199a45e06eed71ad371a..e926bc89c571888d06fc44d37770339fb75896ff 100644
--- a/surfaceflinger.te
+++ b/surfaceflinger.te
@@ -42,4 +42,5 @@ allow surfaceflinger bootanim:fd use;
 
 # Allow a dumpstate triggered screenshot
 binder_call(surfaceflinger, dumpstate)
+binder_call(surfaceflinger, shell)
 allow surfaceflinger shell_data_file:file write;