diff --git a/policy/modules/services/cvs.te b/policy/modules/services/cvs.te
index f2f60556c..61589228f 100644
--- a/policy/modules/services/cvs.te
+++ b/policy/modules/services/cvs.te
@@ -15,7 +15,6 @@ gen_tunable(allow_cvs_read_shadow, false)
 
 type cvs_t;
 type cvs_exec_t;
-inetd_tcp_service_domain(cvs_t, cvs_exec_t)
 init_daemon_domain(cvs_t, cvs_exec_t)
 application_executable_file(cvs_exec_t)
 
@@ -98,6 +97,10 @@ tunable_policy(`allow_cvs_read_shadow',`
 	auth_tunable_read_shadow(cvs_t)
 ')
 
+optional_policy(`
+	inetd_tcp_service_domain(cvs_t, cvs_exec_t)
+')
+
 optional_policy(`
 	kerberos_read_config(cvs_t)
 	kerberos_read_keytab(cvs_t)