diff --git a/sepolicy/private/dnsmasq.te b/sepolicy/private/dnsmasq.te
new file mode 100644
index 00000000..cc70e2ab
--- /dev/null
+++ b/sepolicy/private/dnsmasq.te
@@ -0,0 +1 @@
+allow dnsmasq netd:unix_stream_socket { getattr };