diff --git a/nfc.te b/nfc.te
index 3545e23..de482f4 100644
--- a/nfc.te
+++ b/nfc.te
@@ -44,4 +44,9 @@
     -trust_service
     -user_service
     -vibrator_service
-}:service_manager find;
\ No newline at end of file
+}:service_manager find;
+
+# already open bugreport file descriptors may be shared with
+# the nfc process, from a file in
+# /data/data/com.android.shell/files/bugreports/bugreport-*.
+allow nfc shell_data_file:file read;