diff --git a/refpolicy/policy/modules/services/radius.te b/refpolicy/policy/modules/services/radius.te
index cb79790..66574c4 100644
--- a/refpolicy/policy/modules/services/radius.te
+++ b/refpolicy/policy/modules/services/radius.te
@@ -73,6 +73,7 @@ fs_search_auto_mountpoints(radiusd_t)
 term_dontaudit_use_console(radiusd_t)
 
 auth_read_shadow(radiusd_t)
+auth_domtrans_chk_passwd(radiusd_t)
 
 corecmd_exec_bin(radiusd_t)
 corecmd_exec_shell(radiusd_t)
diff --git a/refpolicy/policy/modules/system/sysnetwork.if b/refpolicy/policy/modules/system/sysnetwork.if
index 42f145b..386661c 100644
--- a/refpolicy/policy/modules/system/sysnetwork.if
+++ b/refpolicy/policy/modules/system/sysnetwork.if
@@ -419,7 +419,7 @@ interface(`sysnet_dns_name_resolve',`
 	corenet_tcp_sendrecv_all_nodes($1)
 	corenet_udp_sendrecv_all_nodes($1)
 	corenet_raw_sendrecv_all_nodes($1)
-	corenet_tcp_sendrecv_all_ports($1)
+	corenet_tcp_sendrecv_dns_port($1)
 	corenet_udp_sendrecv_dns_port($1)
 	corenet_tcp_bind_all_nodes($1)
 	corenet_udp_bind_all_nodes($1)