diff --git a/public/netd.te b/public/netd.te
index faf7cacddf471a23ff346db411d8a566f32a63be..7657eaf9d42c5ac6a3e305e67b9adb3006610639 100644
--- a/public/netd.te
+++ b/public/netd.te
@@ -94,6 +94,7 @@ allow netd netd_listener_service:service_manager find;
 
 # Allow netd to operate on sockets that are passed to it.
 allow netd netdomain:{
+  icmp_socket
   tcp_socket
   udp_socket
   rawip_socket