diff --git a/policy/modules/admin/sudo.if b/policy/modules/admin/sudo.if
index 8fe9721be..93459b7c5 100644
--- a/policy/modules/admin/sudo.if
+++ b/policy/modules/admin/sudo.if
@@ -83,7 +83,6 @@ template(`sudo_role_template',`
 	kernel_read_system_state($1_sudo_t)
 	kernel_link_key($1_sudo_t)
 
-	corecmd_read_bin_symlinks($1_sudo_t)
 	corecmd_exec_all_executables($1_sudo_t)
 
 	dev_getattr_fs($1_sudo_t)
diff --git a/policy/modules/services/ssh.if b/policy/modules/services/ssh.if
index 486339f0a..eb7fdceb0 100644
--- a/policy/modules/services/ssh.if
+++ b/policy/modules/services/ssh.if
@@ -229,8 +229,6 @@ template(`ssh_server_template', `
 	auth_rw_login_records($1_t)
 	auth_rw_faillog($1_t)
 
-	corecmd_read_bin_symlinks($1_t)
-	corecmd_getattr_bin_files($1_t)
 	# for sshd subsystems, such as sftp-server.
 	corecmd_getattr_bin_files($1_t)
 
diff --git a/policy/modules/system/locallogin.te b/policy/modules/system/locallogin.te
index 9a0fafe9f..8a95680d4 100644
--- a/policy/modules/system/locallogin.te
+++ b/policy/modules/system/locallogin.te
@@ -60,7 +60,6 @@ kernel_search_key(local_login_t)
 kernel_link_key(local_login_t)
 
 corecmd_list_bin(local_login_t)
-corecmd_read_bin_symlinks(local_login_t)
 # cjp: these are probably not needed:
 corecmd_read_bin_files(local_login_t)
 corecmd_read_bin_pipes(local_login_t)
diff --git a/policy/modules/system/logging.if b/policy/modules/system/logging.if
index 9f6f5f3b6..8bba7ac8d 100644
--- a/policy/modules/system/logging.if
+++ b/policy/modules/system/logging.if
@@ -411,7 +411,6 @@ interface(`logging_check_exec_syslog',`
 	')
 
 	corecmd_list_bin($1)
-	corecmd_read_bin_symlinks($1)
 	allow $1 syslogd_exec_t:file execute;
 ')
 
diff --git a/policy/modules/system/selinuxutil.te b/policy/modules/system/selinuxutil.te
index 8b8eccce7..4dcca1142 100644
--- a/policy/modules/system/selinuxutil.te
+++ b/policy/modules/system/selinuxutil.te
@@ -242,7 +242,6 @@ kernel_read_system_state(newrole_t)
 kernel_read_kernel_sysctls(newrole_t)
 
 corecmd_list_bin(newrole_t)
-corecmd_read_bin_symlinks(newrole_t)
 
 dev_read_urand(newrole_t)