diff --git a/policy/modules/services/apache.te b/policy/modules/services/apache.te
index a9132c1..74d94fb 100644
--- a/policy/modules/services/apache.te
+++ b/policy/modules/services/apache.te
@@ -38,6 +38,13 @@ gen_tunable(allow_httpd_mod_auth_pam, false)
 
 ## <desc>
 ##	<p>
+##	Allow Apache to use mod_auth_pam
+##	</p>
+## </desc>
+gen_tunable(allow_httpd_mod_auth_ntlm_winbind, false)
+
+## <desc>
+##	<p>
 ##	Allow httpd scripts and modules execmem/execstack
 ##	</p>
 ## </desc>
@@ -506,13 +513,6 @@ tunable_policy(`allow_httpd_mod_auth_pam',`
 	logging_send_audit_msgs(httpd_t)
 ')
 
-## <desc>
-##	<p>
-##	Allow Apache to use mod_auth_pam
-##	</p>
-## </desc>
-gen_tunable(allow_httpd_mod_auth_ntlm_winbind, false)
-
 optional_policy(`
 	tunable_policy(`allow_httpd_mod_auth_ntlm_winbind',`
 		samba_domtrans_winbind_helper(httpd_t)