diff --git a/sepolicy/su.te b/sepolicy/su.te
index 32be15a..a0be12a 100644
--- a/sepolicy/su.te
+++ b/sepolicy/su.te
@@ -136,7 +136,7 @@ allow phhsu_daemon domain:fd { use };
 allow phhsu_daemon domain:unix_stream_socket { connectto ioctl getattr getopt read write shutdown };
 allow phhsu_daemon self:netlink_kobject_uevent_socket create_socket_perms;
 allow phhsu_daemon self:{ netlink_tcpdiag_socket } { create_socket_perms nlmsg_write nlmsg_read };
-allow phhsu_daemon self:{ netlink_selinux_socket } { create_socket_perms nlmsg_write nlmsg_read };
+allow phhsu_daemon self:{ netlink_selinux_socket } { create_socket_perms };
 
 allow phhsu_daemon file_type:file create_file_perms;
 allow phhsu_daemon file_type:dir create_dir_perms;