diff --git a/refpolicy/policy/modules/kernel/domain.if b/refpolicy/policy/modules/kernel/domain.if
index 8c3b719f7..95822fb8e 100644
--- a/refpolicy/policy/modules/kernel/domain.if
+++ b/refpolicy/policy/modules/kernel/domain.if
@@ -58,11 +58,6 @@ interface(`domain_type',`
 
 	# these seem questionable:
 
-	# allow any domain to connect to the LDAP server
-	optional_policy(`
-		ldap_use($1)
-	')
-
 	optional_policy(`
 		rpm_use_fds($1)
 		rpm_read_pipes($1)