diff --git a/roles/rke2/selinux/my-openstack.te b/roles/rke2/selinux/my-openstack.te
index 008be38b54a7e5d4ea9b8162118a628ed726175d..9c3023b3f7eef5a352c84b05eef3570b07d3838f 100644
--- a/roles/rke2/selinux/my-openstack.te
+++ b/roles/rke2/selinux/my-openstack.te
@@ -4,6 +4,7 @@ require {
         type cert_t;
         type container_t;
         class dir read;
+        class lnk_file read;
 }
 
 #============= container_t ==============