diff --git a/policy/modules/kernel/kernel.te b/policy/modules/kernel/kernel.te
index 9bb09e25f1..d4ca28c706 100644
--- a/policy/modules/kernel/kernel.te
+++ b/policy/modules/kernel/kernel.te
@@ -344,6 +344,7 @@ term_filetrans_all_named_dev(kernel_t)
 dev_map_dri(kernel_t)
 dev_map_framebuffer(kernel_t)
 
+fs_getattr_all_fs(kernel_t)
 # Mount root file system. Used when loading a policy
 # from initrd, then mounting the root filesystem
 fs_mount_all_fs(kernel_t)
@@ -495,8 +496,6 @@ optional_policy(`
 	corenet_sendrecv_portmap_client_packets(kernel_t)
 	corenet_sendrecv_generic_server_packets(kernel_t)
 
-	fs_getattr_xattr_fs(kernel_t)
-
 	auth_dontaudit_getattr_shadow(kernel_t)
 
 	sysnet_read_config(kernel_t)