diff --git a/selinux/ipa_kpasswd/ipa_kpasswd.te b/selinux/ipa_kpasswd/ipa_kpasswd.te
index 07312ce98..292be7b89 100644
--- a/selinux/ipa_kpasswd/ipa_kpasswd.te
+++ b/selinux/ipa_kpasswd/ipa_kpasswd.te
@@ -75,5 +75,6 @@ optional_policy(`
              type kerberos_password_port_t;
     ')
     corenet_tcp_bind_kerberos_password_port(ipa_kpasswd_t)
+    corenet_udp_bind_kerberos_password_port(ipa_kpasswd_t)
 ')