diff --git a/refpolicy/policy/global_tunables b/refpolicy/policy/global_tunables
index 897620a..a292811 100644
--- a/refpolicy/policy/global_tunables
+++ b/refpolicy/policy/global_tunables
@@ -8,6 +8,11 @@ gen_tunable(allow_execmem,false)
 ## </tunable>
 gen_tunable(allow_execmod,false)
 
+## <tunable name="allow_gpg_execstack" dftval="false">
+##	Allow gpg executable stack
+## </tunable>
+gen_tunable(allow_gpg_execstack,false)
+
 ## <tunable name="allow_kerberos" dftval="false">
 ##	Allow system to run with kerberos
 ## </tunable>
@@ -30,11 +35,6 @@ gen_tunable(cron_can_relabel,false)
 ## </tunable>
 gen_tunable(fcron_crond,false)
 
-## <tunable name="allow_gpg_execstack" dftval="false">
-##	Allow gpg executable stack
-## </tunable>
-gen_tunable(allow_gpg_execstack,false)
-
 ## <tunable name="read_default_t" dftval="false">
 ##	Allow reading of default_t files.
 ## </tunable>