diff --git a/policy/modules/services/postfix.te b/policy/modules/services/postfix.te
index e5c6bb891..d07a817e2 100644
--- a/policy/modules/services/postfix.te
+++ b/policy/modules/services/postfix.te
@@ -738,6 +738,10 @@ allow postfix_showq_t postfix_spool_t:file read_file_perms;
 term_use_all_ptys(postfix_showq_t)
 term_use_all_ttys(postfix_showq_t)
 
+optional_policy(`
+	systemd_use_nss(postfix_showq_t)
+')
+
 ########################################
 #
 # Smtp delivery local policy
@@ -761,10 +765,6 @@ optional_policy(`
 	cyrus_stream_connect(postfix_smtp_t)
 ')
 
-optional_policy(`
-	systemd_use_nss(postfix_smtp_t)
-')
-
 optional_policy(`
 	dovecot_stream_connect(postfix_smtp_t)
 ')
@@ -774,7 +774,7 @@ optional_policy(`
 ')
 
 optional_policy(`
-	systemd_use_nss(postfix_showq_t)
+	systemd_use_nss(postfix_smtp_t)
 ')
 
 ########################################
@@ -806,10 +806,6 @@ optional_policy(`
 	certbot_read_lib(postfix_smtpd_t)
 ')
 
-optional_policy(`
-	systemd_use_nss(postfix_smtpd_t)
-')
-
 optional_policy(`
 	dovecot_stream_connect_auth(postfix_smtpd_t)
 	dovecot_stream_connect(postfix_smtpd_t)
@@ -840,6 +836,10 @@ optional_policy(`
 	spamassassin_stream_connect_spamd(postfix_smtpd_t)
 ')
 
+optional_policy(`
+	systemd_use_nss(postfix_smtpd_t)
+')
+
 ########################################
 #
 # Virtual local policy