diff --git a/policy/modules/contrib/sssd.te b/policy/modules/contrib/sssd.te
index 26a287fdf0..53d08a80fa 100644
--- a/policy/modules/contrib/sssd.te
+++ b/policy/modules/contrib/sssd.te
@@ -76,6 +76,7 @@ allow sssd_t self:unix_stream_socket { create_stream_socket_perms connectto };
 allow sssd_t sssd_exec_t:file execute_no_trans;
 
 read_files_pattern(sssd_t, sssd_conf_t, sssd_conf_t)
+read_lnk_files_pattern(sssd_t, sssd_conf_t, sssd_conf_t)
 list_dirs_pattern(sssd_t, sssd_conf_t, sssd_conf_t)
 
 manage_dirs_pattern(sssd_t, sssd_public_t, sssd_public_t)