diff --git a/policy/modules/admin/netutils.te b/policy/modules/admin/netutils.te
index 312b047edc..ea107a66cb 100644
--- a/policy/modules/admin/netutils.te
+++ b/policy/modules/admin/netutils.te
@@ -139,6 +139,8 @@ allow ping_t self:packet_socket create_socket_perms;
 allow ping_t self:netlink_route_socket create_netlink_socket_perms;
 allow ping_t self:icmp_socket create_socket_perms;
 
+kernel_read_net_sysctls(ping_t)
+
 corenet_all_recvfrom_netlabel(ping_t)
 corenet_tcp_sendrecv_generic_if(ping_t)
 corenet_raw_sendrecv_generic_if(ping_t)