diff --git a/policy/modules/contrib/keyutils.te b/policy/modules/contrib/keyutils.te
index 5a7077c4d9..a9754ffd08 100644
--- a/policy/modules/contrib/keyutils.te
+++ b/policy/modules/contrib/keyutils.te
@@ -27,6 +27,8 @@ optional_policy(`
 ')
 
 ### policy for the keyutils_dns_resolver_t domain
+can_exec(keyutils_dns_resolver_t, keyutils_dns_resolver_exec_t)
+
 allow keyutils_dns_resolver_t self:netlink_route_socket r_netlink_socket_perms;
 allow keyutils_dns_resolver_t self:udp_socket create_socket_perms;