diff --git a/policy/modules/admin/sudo.if b/policy/modules/admin/sudo.if
index 418e944a0b..43fb688df1 100644
--- a/policy/modules/admin/sudo.if
+++ b/policy/modules/admin/sudo.if
@@ -102,6 +102,7 @@ template(`sudo_role_template',`
 
 	optional_policy(`
 		netutils_domtrans($1_sudo_t)
+		netutils_run_traceroute($1_sudo_t, $2)
 	')
 
 	optional_policy(`