diff --git a/selinux/cockpit.te b/selinux/cockpit.te
index 57a07ef9a..c2977853f 100644
--- a/selinux/cockpit.te
+++ b/selinux/cockpit.te
@@ -198,3 +198,7 @@ optional_policy(`
     ')
     cockpit_read_pid_files(local_login_t)
 ')
+
+optional_policy(`
+    gnome_exec_keyringd(cockpit_session_t)
+')