diff --git a/kernel.te b/kernel.te
index 2d4a856051ccbf86cc196ded8a25efb00aa12c15..fce05ad359e00eea2330df99b4802c08225283b7 100644
--- a/kernel.te
+++ b/kernel.te
@@ -1,5 +1,5 @@
 # Life begins with the kernel.
-type kernel, domain;
+type kernel, domain, mlstrustedsubject;
 
 allow kernel self:capability sys_nice;