diff --git a/sepolicy/netd.te b/sepolicy/netd.te
new file mode 100644
index 0000000..86fe108
--- /dev/null
+++ b/sepolicy/netd.te
@@ -0,0 +1,2 @@
+# Triggers a sys_module denial, but kernel has CONFIG_MODULES=n.
+dontaudit netd self:capability sys_module;