diff --git a/shell.te b/shell.te
index 77b21bee0134c1046b12659c481603502d7b074f..00e991b560d51afe293d6cd7fccb02b9291d26a2 100644
--- a/shell.te
+++ b/shell.te
@@ -44,6 +44,8 @@ allow shell ctl_dumpstate_prop:property_service set;
 allow shell debug_prop:property_service set;
 allow shell powerctl_prop:property_service set;
 
+allow shell system_server_service:service_manager find;
+
 # systrace support - allow atrace to run
 # debugfs doesn't support labeling individual files, so we have
 # to grant read access to all of /sys/kernel/debug.