diff --git a/private/shell.te b/private/shell.te
index c24bfd3..9bc0bd1 100644
--- a/private/shell.te
+++ b/private/shell.te
@@ -13,3 +13,7 @@
 
 # allow shell to call dumpsys storaged
 binder_call(shell, storaged)
+
+# Perform SELinux access checks, needed for CTS
+selinux_check_access(shell)
+selinux_check_context(shell)