diff --git a/policy/modules/services/rngd.te b/policy/modules/services/rngd.te
index 29dff4280..177199e87 100644
--- a/policy/modules/services/rngd.te
+++ b/policy/modules/services/rngd.te
@@ -21,7 +21,7 @@ files_runtime_file(rngd_runtime_t)
 #
 
 allow rngd_t self:capability { ipc_lock sys_admin };
-allow rngd_t self:process signal;
+allow rngd_t self:process { setsched getsched signal };
 allow rngd_t self:fifo_file rw_fifo_file_perms;
 allow rngd_t self:unix_stream_socket { accept listen };
 
@@ -41,3 +41,4 @@ files_read_etc_files(rngd_t)
 logging_send_syslog_msg(rngd_t)
 
 miscfiles_read_localization(rngd_t)
+miscfiles_read_generic_certs(rngd_t)