diff --git a/policy/modules/services/ssh.te b/policy/modules/services/ssh.te
index 96fa4824f9..696520ecaf 100644
--- a/policy/modules/services/ssh.te
+++ b/policy/modules/services/ssh.te
@@ -267,6 +267,10 @@ optional_policy(`
 	kerberos_read_keytab(ssh_t)
 ')
 
+optional_policy(`
+	systemd_read_conf_files(ssh_t)
+')
+
 optional_policy(`
 	xserver_user_x_domain_template(ssh, ssh_t, ssh_tmpfs_t)
 	xserver_domtrans_xauth(ssh_t)