diff --git a/adbd.te b/adbd.te
index 704b7bdf0..d287934a5 100644
--- a/adbd.te
+++ b/adbd.te
@@ -39,6 +39,10 @@ allow adbd shell_data_file:file create_file_perms;
 allow adbd sdcard_type:dir create_dir_perms;
 allow adbd sdcard_type:file create_file_perms;
 
+# adb pull /data/anr/traces.txt
+allow adbd anr_data_file:dir r_dir_perms;
+allow adbd anr_data_file:file r_file_perms;
+
 # Set service.adb.*, sys.powerctl properties.
 unix_socket_connect(adbd, property, init)
 allow adbd shell_prop:property_service set;
diff --git a/shell.te b/shell.te
index 94ad762db..50cc4f523 100644
--- a/shell.te
+++ b/shell.te
@@ -13,4 +13,8 @@ app_domain(shell)
 read_logd(shell)
 control_logd(shell)
 
+# read files in /data/anr
+allow shell anr_data_file:dir r_dir_perms;
+allow shell anr_data_file:file r_file_perms;
+
 # inherits from shelldomain.te