diff --git a/sepolicy/private/sec_system_init_shell.te b/sepolicy/private/sec_system_init_shell.te
new file mode 100644
index 0000000..73c3250
--- /dev/null
+++ b/sepolicy/private/sec_system_init_shell.te
@@ -0,0 +1,3 @@
+type sec_system_init_shell, domain;
+
+dontaudit sec_system_init_shell domain:file { getattr open };