diff --git a/private/shell.te b/private/shell.te
index 31bf506..70f296e 100644
--- a/private/shell.te
+++ b/private/shell.te
@@ -484,6 +484,7 @@
 ')
 
 allow shell tee_service_contexts_file:file r_file_perms;
+allow shell test_pkvm_tee_service:tee_service use;
 
 # Everything is labeled as rootfs in recovery mode. Allow shell to
 # execute them.