diff --git a/dumpstate.te b/dumpstate.te
index 948131e6756bd16b1520a9cb4e4d122d6549d4e1..e0fe4ceb80d335bd2ac2220c37a3aa4177e25c1d 100644
--- a/dumpstate.te
+++ b/dumpstate.te
@@ -71,5 +71,5 @@ allow dumpstate self:capability sys_ptrace;
 
 # Allow the bugreport service to create a file in
 # /data/data/com.android.shell/files/bugreports/bugreport
-allow dumpstate shell_data_file:dir rw_dir_perms;
+allow dumpstate shell_data_file:dir create_dir_perms;
 allow dumpstate shell_data_file:file create_file_perms;
diff --git a/surfaceflinger.te b/surfaceflinger.te
index 514722394d299323430c99b244d788193f1756cf..246f41ccc49158072ee0d2260c4f36b52f7c2e65 100644
--- a/surfaceflinger.te
+++ b/surfaceflinger.te
@@ -41,4 +41,5 @@ allow surfaceflinger bootanim:fd use;
 
 # Allow a dumpstate triggered screenshot
 binder_call(surfaceflinger, dumpstate)
+binder_call(surfaceflinger, shell)
 allow surfaceflinger shell_data_file:file write;