diff --git a/policy/modules/services/icecast.te b/policy/modules/services/icecast.te
index a57ffc052..fbcdd7416 100644
--- a/policy/modules/services/icecast.te
+++ b/policy/modules/services/icecast.te
@@ -37,6 +37,8 @@ manage_dirs_pattern(icecast_t, icecast_var_run_t, icecast_var_run_t)
 manage_files_pattern(icecast_t, icecast_var_run_t, icecast_var_run_t)
 files_pid_filetrans(icecast_t, icecast_var_run_t, { file dir })
 
+kernel_read_system_state(icecast_t)
+
 corenet_tcp_bind_soundd_port(icecast_t)
 
 # Init script handling
@@ -50,6 +52,10 @@ miscfiles_read_localization(icecast_t)
 
 sysnet_dns_name_resolve(icecast_t)
 
+optional_policy(`
+	apache_read_sys_content(icecast_t)
+')
+
 optional_policy(`
 	rtkit_scheduled(icecast_t)
 ')