diff --git a/refpolicy/policy/modules/services/bluetooth.if b/refpolicy/policy/modules/services/bluetooth.if
index d61362a..d0b4322 100644
--- a/refpolicy/policy/modules/services/bluetooth.if
+++ b/refpolicy/policy/modules/services/bluetooth.if
@@ -1 +1,18 @@
## Bluetooth tools and system services.
+
+########################################
+##
+## Read bluetooth helper files.
+##
+##
+## Domain allowed access.
+##
+#
+interface(`bluetooth_read_helper_files',`
+ gen_require(`
+ type bluetooth_helper_t;
+ ')
+
+ allow $1 bluetooth_helper_t:dir search;
+ allow $1 bluetooth_helper_t:file { read getattr };
+')
diff --git a/refpolicy/policy/modules/services/networkmanager.te b/refpolicy/policy/modules/services/networkmanager.te
index 2be3b08..afc0dbf 100644
--- a/refpolicy/policy/modules/services/networkmanager.te
+++ b/refpolicy/policy/modules/services/networkmanager.te
@@ -111,6 +111,10 @@ ifdef(`targeted_policy', `
files_dontaudit_read_root_file(NetworkManager_t)
')
+optional_policy(`bluetooth.te',`
+ bluetooth_read_helper_files(NetworkManager_t)
+')
+
optional_policy(`consoletype.te',`
consoletype_exec(NetworkManager_t)
')
@@ -163,6 +167,12 @@ optional_policy(`dbus.te',`
allow NetworkManager_t initrc_t:dbus send_msg;
allow initrc_t NetworkManager_t:dbus send_msg;
+ allow NetworkManager_t apmd_t:dbus send_msg;
+ allow apmd_t NetworkManager_t:dbus send_msg;
+
+ allow NetworkManager_t named_t:dbus send_msg;
+ allow named_t NetworkManager_t:dbus send_msg;
+
dbus_system_bus_client_template(NetworkManager,NetworkManager_t)
dbus_connect_system_bus(NetworkManager_t)
dbus_send_system_bus_msg(NetworkManager_t)