diff --git a/public/racoon.te b/public/racoon.te
index 3255b9e..476981e 100644
--- a/public/racoon.te
+++ b/public/racoon.te
@@ -5,7 +5,7 @@
 typeattribute racoon mlstrustedsubject;
 
 net_domain(racoon)
-allowxperm racoon self:udp_socket ioctl { SIOCSIFFLAGS SIOCSIFADDR };
+allowxperm racoon self:udp_socket ioctl { SIOCSIFFLAGS SIOCSIFADDR SIOCSIFNETMASK };
 
 binder_use(racoon)