diff --git a/selinux/ipa.te b/selinux/ipa.te
index b1e29c8e2..587e5e585 100644
--- a/selinux/ipa.te
+++ b/selinux/ipa.te
@@ -147,6 +147,9 @@ auth_use_nsswitch(ipa_helper_t)
 
 files_list_tmp(ipa_helper_t)
 
+init_read_state(ipa_helper_t)
+init_stream_connect(ipa_helper_t)
+
 ipa_manage_pid_files(ipa_helper_t)
 ipa_read_lib(ipa_helper_t)
 
@@ -156,6 +159,10 @@ optional_policy(`
     dirsrv_stream_connect(ipa_helper_t)
 ')
 
+optional_policy(`
+    dirsrv_systemctl(ipa_helper_t)
+')
+
 optional_policy(`
     ldap_stream_connect(ipa_helper_t)
 ')
@@ -182,6 +189,7 @@ optional_policy(`
 
 optional_policy(`
     sssd_manage_lib_files(ipa_helper_t)
+    sssd_systemctl(ipa_helper_t)
 ')
 
 ########################################