diff --git a/cts.te b/cts.te
index 3600e94..489be1a 100644
--- a/cts.te
+++ b/cts.te
@@ -27,6 +27,10 @@
 allow appdomain shell_exec:file rx_file_perms;
 allow appdomain system_file:file rx_file_perms;
 
+# Accesses to apk_tmp_file and shell_data_file
+allow appdomain apk_tmp_file:file rw_file_perms;
+allow appdomain shell_data_file:file r_file_perms;
+
 # Read routing information.
 allow netdomain self:netlink_route_socket { create read write nlmsg_read };