diff --git a/policy/modules/services/smartmon.te b/policy/modules/services/smartmon.te
index 32c80f7126..e7ecd98396 100644
--- a/policy/modules/services/smartmon.te
+++ b/policy/modules/services/smartmon.te
@@ -143,8 +143,6 @@ corenet_tcp_connect_http_port(smartmon_update_drivedb_t)
 
 files_read_etc_files(smartmon_update_drivedb_t)
 
-fstools_exec(smartmon_update_drivedb_t)
-
 kernel_dontaudit_read_system_state(smartmon_update_drivedb_t)
 
 miscfiles_read_generic_certs(smartmon_update_drivedb_t)
@@ -162,6 +160,10 @@ optional_policy(`
 	cron_system_entry(smartmon_update_drivedb_t, smartmon_update_drivedb_exec_t)
 ')
 
+optional_policy(`
+	fstools_exec(smartmon_update_drivedb_t)
+')
+
 optional_policy(`
 	gpg_exec_agent(smartmon_update_drivedb_t)
 	gpg_exec(smartmon_update_drivedb_t)