diff --git a/0001-units-system-run-in-the-root-network-namespace.patch b/0001-units-system-run-in-the-root-network-namespace.patch
new file mode 100644
index 0000000..84d6ebb
--- /dev/null
+++ b/0001-units-system-run-in-the-root-network-namespace.patch
@@ -0,0 +1,33 @@
+From a11182d2cd4bc1a89a9795c572add2d85ea92fa7 Mon Sep 17 00:00:00 2001
+From: Tom Gundersen <teg@jklm.no>
+Date: Mon, 14 Jan 2019 13:37:09 +0100
+Subject: [PATCH] units/system: run in the root network namespace
+
+The SELinux netlink socket can only be created in the root net
+namespace. libselinux does not support (as far as I can tell)
+providing the socket as a .socket unit, so we must run the broker
+in the root network namespace if we want to be notified about
+SELinux policy changes.
+
+This fixes issue #185.
+
+Signed-off-by: Tom Gundersen <teg@jklm.no>
+---
+ src/units/system/dbus-broker.service.in | 1 -
+ 1 file changed, 1 deletion(-)
+
+diff --git a/src/units/system/dbus-broker.service.in b/src/units/system/dbus-broker.service.in
+index 97f1655..4155630 100644
+--- a/src/units/system/dbus-broker.service.in
++++ b/src/units/system/dbus-broker.service.in
+@@ -14,7 +14,6 @@ LimitNOFILE=16384
+ ProtectSystem=full
+ PrivateTmp=true
+ PrivateDevices=true
+-PrivateNetwork=true
+ ExecStart=@bindir@/dbus-broker-launch --scope system --audit
+ ExecReload=@bindir@/busctl call org.freedesktop.DBus /org/freedesktop/DBus org.freedesktop.DBus ReloadConfig
+ 
+-- 
+2.20.1
+
diff --git a/dbus-broker.spec b/dbus-broker.spec
index bc0fda5..919ca66 100644
--- a/dbus-broker.spec
+++ b/dbus-broker.spec
@@ -2,13 +2,14 @@
 
 Name:                 dbus-broker
 Version:              17
-Release:              2%{?dist}
+Release:              3%{?dist}
 Summary:              Linux D-Bus Message Broker
 License:              ASL 2.0
 URL:                  https://github.com/bus1/dbus-broker
 Source0:              https://github.com/bus1/dbus-broker/releases/download/v%{version}/dbus-broker-%{version}.tar.xz
 Patch0:               0001-units-system-add-messagebus-alias.patch
 Patch1:               0001-launch-align-errors-when-reading-service-files-with-.patch
+Patch2:               0001-units-system-run-in-the-root-network-namespace.patch
 Provides:             bundled(c-dvar) = 1
 Provides:             bundled(c-ini) = 1
 Provides:             bundled(c-list) = 3
@@ -113,6 +114,9 @@ fi
 %{_userunitdir}/dbus-broker.service
 
 %changelog
+* Mon Jan 14 2019 Tom Gundersen <teg@jklm.no> - 17-3
+- run in the root network namespace
+
 * Sat Jan 12 2019 Tom Gundersen <teg@jklm.no> - 17-2
 - ignore config files that cannot be opened (fix rhbz #1665450)