diff --git a/private/mdnsd.te b/private/mdnsd.te
index 54659d1d1d1b94bd8edae3dc82f2f7101ca439a7..2fefc32dd1eb6c02d72d0a8b56bb95c1b9c4c73f 100644
--- a/private/mdnsd.te
+++ b/private/mdnsd.te
@@ -1,3 +1,11 @@
-# type_transition must be private policy the domain_trans rules could stay
-# public, but conceptually should go with this
+# mdns daemon
+
+typeattribute mdnsd mlstrustedsubject;
+
+type mdnsd_exec, exec_type, file_type;
 init_daemon_domain(mdnsd)
+
+net_domain(mdnsd)
+
+# Read from /proc/net
+r_dir_file(mdnsd, proc_net)
diff --git a/public/mdnsd.te b/public/mdnsd.te
index c32b433c9664f1cc10aa0f1aadd3e5af028e0f29..ef7b065d875658cb229e0153d4cb5c266159d0e9 100644
--- a/public/mdnsd.te
+++ b/public/mdnsd.te
@@ -1,8 +1,2 @@
 # mdns daemon
-type mdnsd, domain, mlstrustedsubject;
-type mdnsd_exec, exec_type, file_type;
-
-net_domain(mdnsd)
-
-# Read from /proc/net
-r_dir_file(mdnsd, proc_net)
+type mdnsd, domain;