diff --git a/rpm.te b/rpm.te
index c2bc3aa..e06bfd7 100644
--- a/rpm.te
+++ b/rpm.te
@@ -6,9 +6,6 @@ attribute rpm_transition_domain;
 #
 # Declarations
 #
-type debuginfo_exec_t;
-domain_entry_file(rpm_t, debuginfo_exec_t)
-
 type rpm_t;
 type rpm_exec_t;
 init_system_domain(rpm_t, rpm_exec_t)
@@ -16,6 +13,10 @@ domain_obj_id_change_exemption(rpm_t)
 domain_role_change_exemption(rpm_t)
 domain_system_change_exemption(rpm_t)
 domain_interactive_fd(rpm_t)
+role system_r types rpm_t;
+
+type debuginfo_exec_t;
+domain_entry_file(rpm_t, debuginfo_exec_t)
 
 type rpm_file_t;
 files_type(rpm_file_t)