diff --git a/policy/modules/kernel/files.if b/policy/modules/kernel/files.if
index e188a212b..96b91e0f9 100644
--- a/policy/modules/kernel/files.if
+++ b/policy/modules/kernel/files.if
@@ -1872,6 +1872,24 @@ interface(`files_delete_root_dir_entry',`
allow $1 root_t:dir rw_dir_perms;
')
+########################################
+##
+## Relabel to and from rootfs file system.
+##
+##
+##
+## Domain allowed access.
+##
+##
+#
+interface(`files_relabel_rootfs',`
+ gen_require(`
+ type root_t;
+ ')
+
+ allow $1 root_t:filesystem { relabelto relabelfrom };
+')
+
########################################
##
## Unmount a rootfs filesystem.