diff --git a/modules-targeted-contrib.conf b/modules-targeted-contrib.conf
index c1c2acde..ce9e5bc1 100644
--- a/modules-targeted-contrib.conf
+++ b/modules-targeted-contrib.conf
@@ -2304,3 +2304,12 @@ redis = module
 # hypervkvp policy
 #
 hypervkvp = module
+
+# Layer: contrib
+# Module: lsm
+# 
+# lsm policy
+#
+lsm = module
+
+
diff --git a/permissivedomains.te b/permissivedomains.te
index b32e22f4..3370d891 100644
--- a/permissivedomains.te
+++ b/permissivedomains.te
@@ -31,3 +31,11 @@ optional_policy(`
 
         permissive hypervkvp_t;
 ')
+
+optional_policy(`
+    gen_require(`
+                type lsmd_t;
+        ')
+
+        permissive lsmd_t;
+')