diff --git a/bluetooth.te b/bluetooth.te
index 5016bcfd531f3c65ee0a58cd2c508433aa07baf4..071e40bd182f97da9e78552f8d9f5bb471619726 100644
--- a/bluetooth.te
+++ b/bluetooth.te
@@ -75,4 +75,4 @@ allow bluetooth shell_data_file:file read;
# Superuser capabilities.
# bluetooth requires net_admin and wake_alarm.
neverallow bluetooth self:capability ~net_admin;
-neverallow bluetooth self:capability2 ~wake_alarm;
+neverallow bluetooth self:capability2 ~{ wake_alarm block_suspend };