diff --git a/sepolicy/apmanager.te b/sepolicy/apmanager.te
index 5b54402..bd9cc09 100644
--- a/sepolicy/apmanager.te
+++ b/sepolicy/apmanager.te
@@ -23,6 +23,7 @@
 allow apmanager self:netlink_socket { write getattr setopt read bind create };
 allow apmanager self:netlink_generic_socket create_socket_perms_no_ioctl;
 allow apmanager self:packet_socket { write ioctl setopt read bind create };
+allowxperm apmanager self:packet_socket ioctl { unpriv_sock_ioctls priv_sock_ioctls unpriv_tty_ioctls };
 allow apmanager apmanager_data_file:dir create_dir_perms;
 allow apmanager apmanager_data_file:file create_file_perms;
 allow apmanager apmanager_data_file:sock_file { create getattr unlink setattr write };