diff --git a/private/kernel.te b/private/kernel.te
new file mode 100644
index 0000000..1c2223e
--- /dev/null
+++ b/private/kernel.te
@@ -0,0 +1,3 @@
+# type_transition must be private policy the domain_trans rules could stay
+# public, but conceptually should go with this
+domain_auto_trans(kernel, init_exec, init)