diff --git a/su.te b/su.te
index dda7708..2a3d007 100644
--- a/su.te
+++ b/su.te
@@ -2,6 +2,10 @@
 type su_exec, exec_type, file_type;
 domain_auto_trans(shell, su_exec, su)
 
+# Allow dumpstate to call su on userdebug / eng builds to collect
+# additional information.
+domain_auto_trans(dumpstate, su_exec, su)
+
 # su is unconfined.
 unconfined_domain(su)