diff --git a/policy/modules/services/cron.te b/policy/modules/services/cron.te
index d9d06339..bd8f06ab 100644
--- a/policy/modules/services/cron.te
+++ b/policy/modules/services/cron.te
@@ -1,5 +1,5 @@
 
-policy_module(cron,1.8.2)
+policy_module(cron,1.8.3)
 
 gen_require(`
 	class passwd rootok;
@@ -163,6 +163,9 @@ userdom_list_all_users_home_dirs(crond_t)
 mta_send_mail(crond_t)
 
 ifdef(`distro_debian',`
+	# pam_limits is used
+	allow crond_t self:process setrlimit;
+
 	optional_policy(`
 		# Debian logcheck has the home dir set to its cache
 		logwatch_search_cache_dir(crond_t)