diff --git a/policy/modules/services/container.fc b/policy/modules/services/container.fc
index 9871812de..f98e68ba0 100644
--- a/policy/modules/services/container.fc
+++ b/policy/modules/services/container.fc
@@ -103,6 +103,9 @@ HOME_DIR/\.docker(/.*)?		gen_context(system_u:object_r:container_conf_home_t,s0)
 /var/lib/etcd(/.*)?             gen_context(system_u:object_r:container_file_t,s0)
 /var/lib/kube-proxy(/.*)?		gen_context(system_u:object_r:container_file_t,s0)
 
+/var/lib/rook(/.*)?		gen_context(system_u:object_r:container_file_t,s0)
+/var/lib/rook/rook-ceph/[^/]+/[^/]+/block	-b	gen_context(system_u:object_r:container_device_t,s0)
+
 /var/local-path-provisioner(/.*)?		gen_context(system_u:object_r:container_file_t,s0)
 
 /var/log/containerd(/.*)?		gen_context(system_u:object_r:container_log_t,s0)