diff --git a/policy/modules/kernel/devices.if b/policy/modules/kernel/devices.if
index 2e6c5a326..792ffa2ef 100644
--- a/policy/modules/kernel/devices.if
+++ b/policy/modules/kernel/devices.if
@@ -5209,6 +5209,24 @@ interface(`dev_write_watchdog',`
 	write_chr_files_pattern($1, device_t, watchdog_device_t)
 ')
 
+########################################
+## <summary>
+##	Read the wireless device.
+## </summary>
+## <param name="domain">
+##	<summary>
+##	Domain allowed access.
+##	</summary>
+## </param>
+#
+interface(`dev_read_wireless',`
+	gen_require(`
+		type device_t, wireless_device_t;
+	')
+
+	read_chr_files_pattern($1, device_t, wireless_device_t)
+')
+
 ########################################
 ## <summary>
 ##	Read and write the the wireless device.
diff --git a/policy/modules/system/userdomain.if b/policy/modules/system/userdomain.if
index 218287e18..c15a90a8b 100644
--- a/policy/modules/system/userdomain.if
+++ b/policy/modules/system/userdomain.if
@@ -611,7 +611,7 @@ template(`userdom_common_user_template',`
 	dev_read_sound($1_t)
 	dev_read_sound_mixer($1_t)
 	dev_write_sound_mixer($1_t)
-	dev_rw_wireless($1_t)
+	dev_read_wireless($1_t)
 
 	files_exec_etc_files($1_t)
 	files_search_locks($1_t)
@@ -1320,6 +1320,7 @@ template(`userdom_admin_user_template',`
 	dev_rename_all_blk_files($1_t)
 	dev_rename_all_chr_files($1_t)
 	dev_create_generic_symlinks($1_t)
+	dev_rw_wireless($1_t)
 
 	domain_setpriority_all_domains($1_t)
 	domain_read_all_domains_state($1_t)