diff --git a/policy/modules/apps/wireshark.te b/policy/modules/apps/wireshark.te
index d765f9cd2..66e80fca9 100644
--- a/policy/modules/apps/wireshark.te
+++ b/policy/modules/apps/wireshark.te
@@ -93,8 +93,6 @@ userdom_use_user_terminals(wireshark_t)
 
 userdom_user_content_access_template(wireshark, wireshark_t)
 
-xdg_read_downloads(wireshark_t)
-
 tunable_policy(`use_nfs_home_dirs',`
 	fs_manage_nfs_dirs(wireshark_t)
 	fs_manage_nfs_files(wireshark_t)
@@ -116,6 +114,10 @@ optional_policy(`
 	userhelper_sigchld(wireshark_t)
 ')
 
+optional_policy(`
+	xdg_read_downloads(wireshark_t)
+')
+
 optional_policy(`
 	xserver_user_x_domain_template(wireshark, wireshark_t, wireshark_tmpfs_t)
 	xserver_create_xdm_tmp_sockets(wireshark_t)