diff --git a/modules-targeted-contrib.conf b/modules-targeted-contrib.conf
index a0ed9aa..70c00d3 100644
--- a/modules-targeted-contrib.conf
+++ b/modules-targeted-contrib.conf
@@ -2236,3 +2236,10 @@ pki = module
 # policy for smsd
 #
 smsd = module
+
+# Layer: contrib
+# Module: pesign
+#
+# policy for pesign
+#
+pesign = module
diff --git a/permissivedomains.te b/permissivedomains.te
index 190e506..8234c72 100644
--- a/permissivedomains.te
+++ b/permissivedomains.te
@@ -55,3 +55,11 @@ optional_policy(`
 
         permissive gssproxy_t;
 ')
+
+optional_policy(`
+    gen_require(`
+                type pesign_t;
+        ')
+
+        permissive pesign_t;
+')