diff --git a/policy/modules/services/container.te b/policy/modules/services/container.te
index 8e159d0ab3..385ac1b52e 100644
--- a/policy/modules/services/container.te
+++ b/policy/modules/services/container.te
@@ -756,6 +756,9 @@ kernel_request_load_module(container_engine_t)
 term_remount_devpts(container_engine_t)
 
 init_rw_script_stream_sockets(container_engine_t)
+init_manage_utmp(container_engine_t)
+init_manage_dir_utmp(container_engine_t)
+init_mounton_initrc_runtime(container_engine_t)
 
 ifdef(`init_systemd',`
 	# needed by runc, which is also invoked by other engines
diff --git a/policy/modules/services/dnsmasq.te b/policy/modules/services/dnsmasq.te
index 4a0c3552f3..fab57cef22 100644
--- a/policy/modules/services/dnsmasq.te
+++ b/policy/modules/services/dnsmasq.te
@@ -53,6 +53,8 @@ allow dnsmasq_t dnsmasq_var_log_t:file setattr_file_perms;
 files_read_runtime_files(dnsmasq_t)
 systemd_read_resolved_dir(dnsmasq_t)
 files_map_etc_files(dnsmasq_t)
+init_manage_utmp(dnsmasq_t)
+init_manage_dir_utmp(dnsmasq_t)
 
 systemd_read_resolved_runtime(dnsmasq_t)
 
diff --git a/policy/modules/system/init.if b/policy/modules/system/init.if
index a301ed3053..04ad395fb5 100644
--- a/policy/modules/system/init.if
+++ b/policy/modules/system/init.if
@@ -3094,6 +3094,25 @@ interface(`init_manage_dir_utmp',`
 	allow $1 initrc_runtime_t:dir manage_dir_perms;
 ')
 
+########################################
+## <summary>
+##	Mounton initrc runtime files and directories.
+## </summary>
+## <param name="domain">
+##	<summary>
+##	Domain allowed access.
+##	</summary>
+## </param>
+#
+interface(`init_mounton_initrc_runtime',`
+	gen_require(`
+		type initrc_runtime_t;
+	')
+
+	allow $1 initrc_runtime_t:dir mounton;
+	allow $1 initrc_runtime_t:file mounton;
+')
+
 ########################################
 ## <summary>
 ##	Remove chr file perms from utmp.
diff --git a/policy/modules/system/iptables.te b/policy/modules/system/iptables.te
index b9b0b357d5..423356a44d 100644
--- a/policy/modules/system/iptables.te
+++ b/policy/modules/system/iptables.te
@@ -93,6 +93,7 @@ init_use_script_ptys(iptables_t)
 init_rw_script_pipes(iptables_t)
 init_rw_script_tmp_files(iptables_t)
 init_rw_script_stream_sockets(iptables_t)
+init_read_utmp(iptables_t)
 
 logging_send_syslog_msg(iptables_t)