diff --git a/refpolicy/policy/modules/admin/kudzu.te b/refpolicy/policy/modules/admin/kudzu.te
index 4e99ea1..31691cd 100644
--- a/refpolicy/policy/modules/admin/kudzu.te
+++ b/refpolicy/policy/modules/admin/kudzu.te
@@ -121,6 +121,13 @@ ifdef(`targeted_policy',`
         term_dontaudit_use_unallocated_tty(kudzu_t)
         term_dontaudit_use_generic_pty(kudzu_t)
         files_dontaudit_read_root_file(kudzu_t)
+
+	# cjp: this was originally in the else block
+	# of ifdef userhelper.te, but it seems to
+	# make more sense here.  also, require
+	# blocks curently do not work in the
+	# else block of optionals
+	unconfined_domain_template(kudzu_t)
 ')
 
 tunable_policy(`allow_execmem',`