diff --git a/refpolicy/policy/global_tunables b/refpolicy/policy/global_tunables
new file mode 100644
index 0000000..9dc1832
--- /dev/null
+++ b/refpolicy/policy/global_tunables
@@ -0,0 +1,4 @@
+## <tunable name="use_dns" dftval="false">
+## 	Allow the use of DNS for name resolution.
+## </tunable>
+tunable_def(use_dns,false)