diff --git a/kernel.te b/kernel.te
index 1faa9db..0de0ab8 100644
--- a/kernel.te
+++ b/kernel.te
@@ -11,6 +11,9 @@
 # cgroup filesystem initialization prior to setting the cgroup root directory label.
 allow kernel unlabeled:dir search;
 
+# Mount usbfs.
+allow kernel usbfs:filesystem mount;
+
 # init direct restorecon calls prior to switching to init domain
 # /dev and /dev/socket
 allow kernel { device socket_device }:dir relabelto;