diff --git a/policy/modules/services/apache.te b/policy/modules/services/apache.te
index a9132c1c..74d94fbe 100644
--- a/policy/modules/services/apache.te
+++ b/policy/modules/services/apache.te
@@ -36,6 +36,13 @@ gen_tunable(allow_httpd_anon_write, false)
 ## </desc>
 gen_tunable(allow_httpd_mod_auth_pam, false)
 
+## <desc>
+##	<p>
+##	Allow Apache to use mod_auth_pam
+##	</p>
+## </desc>
+gen_tunable(allow_httpd_mod_auth_ntlm_winbind, false)
+
 ## <desc>
 ##	<p>
 ##	Allow httpd scripts and modules execmem/execstack
@@ -506,13 +513,6 @@ tunable_policy(`allow_httpd_mod_auth_pam',`
 	logging_send_audit_msgs(httpd_t)
 ')
 
-## <desc>
-##	<p>
-##	Allow Apache to use mod_auth_pam
-##	</p>
-## </desc>
-gen_tunable(allow_httpd_mod_auth_ntlm_winbind, false)
-
 optional_policy(`
 	tunable_policy(`allow_httpd_mod_auth_ntlm_winbind',`
 		samba_domtrans_winbind_helper(httpd_t)