diff --git a/policy/modules/admin/netutils.te b/policy/modules/admin/netutils.te
index c85248a3a..a1e23ad96 100644
--- a/policy/modules/admin/netutils.te
+++ b/policy/modules/admin/netutils.te
@@ -191,9 +191,13 @@ corenet_tcp_connect_all_ports(traceroute_t)
 corenet_sendrecv_all_client_packets(traceroute_t)
 corenet_sendrecv_traceroute_server_packets(traceroute_t)
 
+dev_read_rand(traceroute_t)
+dev_read_urand(traceroute_t)
+
 domain_use_interactive_fds(traceroute_t)
 
 files_read_etc_files(traceroute_t)
+files_read_usr_files(traceroute_t)
 
 init_use_fds(traceroute_t)
 
@@ -204,8 +208,3 @@ logging_send_syslog_msg(traceroute_t)
 miscfiles_read_localization(traceroute_t)
 
 userdom_use_inherited_user_terminals(traceroute_t)
-
-#rules needed for nmap
-dev_read_rand(traceroute_t)
-dev_read_urand(traceroute_t)
-files_read_usr_files(traceroute_t)