diff --git a/policy/modules/services/dnsmasq.te b/policy/modules/services/dnsmasq.te
index 7d4a6cae6..b41e717b4 100644
--- a/policy/modules/services/dnsmasq.te
+++ b/policy/modules/services/dnsmasq.te
@@ -85,6 +85,7 @@ dev_read_urand(dnsmasq_t)
 domain_use_interactive_fds(dnsmasq_t)
 
 files_read_etc_runtime_files(dnsmasq_t)
+files_watch_etc_dirs(dnsmasq_t)
 
 fs_getattr_all_fs(dnsmasq_t)
 fs_search_auto_mountpoints(dnsmasq_t)