diff --git a/public/wificond.te b/public/wificond.te
index 8eeb8c8f993531af3f100847937f791268371166..f4990b2d5fc6963d6e50cdabbc6df9938df6b6ad 100644
--- a/public/wificond.te
+++ b/public/wificond.te
@@ -13,7 +13,7 @@ set_prop(wificond, ctl_default_prop)
 # create sockets to set interfaces up and down
 allow wificond self:udp_socket create_socket_perms;
 # setting interface state up/down is a privileged ioctl
-allowxperm wificond self:udp_socket ioctl { SIOCSIFFLAGS };
+allowxperm wificond self:udp_socket ioctl { SIOCSIFFLAGS SIOCSIFHWADDR };
 allow wificond self:global_capability_class_set { net_admin net_raw };
 # allow wificond to speak to nl80211 in the kernel
 allow wificond self:netlink_socket create_socket_perms_no_ioctl;