diff --git a/private/shell.te b/private/shell.te
index 9944bd1..d613a94 100644
--- a/private/shell.te
+++ b/private/shell.te
@@ -261,6 +261,9 @@
 # Allow shell to read the build properties for attestation feature
 get_prop(shell, build_attestation_prop)
 
+# Allow shell to execute oatdump.
+allow shell oatdump_exec:file rx_file_perms;
+
 # Allow shell access to socket for test
 userdebug_or_eng(`
     allow shell aconfigd_socket:sock_file write;