diff --git a/policy/modules/services/dnsmasq.te b/policy/modules/services/dnsmasq.te
index 2e492954d..7b23ba877 100644
--- a/policy/modules/services/dnsmasq.te
+++ b/policy/modules/services/dnsmasq.te
@@ -102,6 +102,12 @@ optional_policy(`
 	cobbler_read_lib_files(dnsmasq_t)
 ')
 
+optional_policy(`
+	container_manage_var_lib_files(dnsmasq_t)
+	container_manage_log_files(dnsmasq_t)
+	container_search_var_lib(dnsmasq_t)
+')
+
 optional_policy(`
 	dbus_connect_system_bus(dnsmasq_t)
 	dbus_system_bus_client(dnsmasq_t)