diff --git a/mariadb.spec b/mariadb.spec
index 9a32eeb..4f572b4 100644
--- a/mariadb.spec
+++ b/mariadb.spec
@@ -1070,7 +1070,9 @@ export MTR_BUILD_THREAD=%{__isa_bits}
 
 %if %{with galera}
 %post server-galera
+# README at support-files/policy/selinux/README recommends:
 semanage port -a -t mysqld_port_t -p tcp 4568 >/dev/null 2>&1 || :
+semanage port -a -t mysqld_port_t -p udp 4567 >/dev/null 2>&1 || :
 semodule -i %{_datadir}/selinux/packages/%{name}/%{name}-server-galera.pp >/dev/null 2>&1 || :
 %endif