diff --git a/policy/modules/contrib/ktls.te b/policy/modules/contrib/ktls.te
index b1efe9951d..04b15a861f 100644
--- a/policy/modules/contrib/ktls.te
+++ b/policy/modules/contrib/ktls.te
@@ -11,3 +11,9 @@ init_daemon_domain(ktlshd_t, ktlshd_exec_t)
 
 permissive ktlshd_t;
 
+allow ktlshd_t self:netlink_generic_socket create_socket_perms;
+allow ktlshd_t self:unix_dgram_socket create_socket_perms;
+
+optional_policy(`
+	logging_send_syslog_msg(ktlshd_t)
+')