diff --git a/rebootmgr.te b/rebootmgr.te
index 46878c5..4b4e6ab 100644
--- a/rebootmgr.te
+++ b/rebootmgr.te
@@ -9,8 +9,6 @@ type rebootmgr_t;
 type rebootmgr_exec_t;
 init_daemon_domain(rebootmgr_t, rebootmgr_exec_t)
 
-permissive rebootmgr_t;
-
 ########################################
 #
 # rebootmgr local policy
@@ -21,12 +19,18 @@ allow rebootmgr_t self:unix_stream_socket create_stream_socket_perms;
 
 domain_use_interactive_fds(rebootmgr_t)
 
-files_read_etc_files(rebootmgr_t)
+files_manage_etc_files(rebootmgr_t)
 
 logging_send_syslog_msg(rebootmgr_t)
 
 miscfiles_read_localization(rebootmgr_t)
 
+systemd_start_power_services(rebootmgr_t)
+
+systemd_dbus_chat_logind(rebootmgr_t)
+
+unconfined_dbus_chat(rebootmgr_t)
+
 optional_policy(`
 	dbus_system_bus_client(rebootmgr_t)
 	dbus_connect_system_bus(rebootmgr_t)
diff --git a/selinux-policy.changes b/selinux-policy.changes
index 6bd4e8d..40d5a02 100644
--- a/selinux-policy.changes
+++ b/selinux-policy.changes
@@ -1,3 +1,10 @@
+-------------------------------------------------------------------
+Fri Aug 27 13:07:54 UTC 2021 - Ales Kedroutek <ales.kedroutek@suse.com>
+
+- fix rebootmgr does not trigger the reboot properly (boo#1189878)
+  * fix managing /etc/rebootmgr.conf
+  * allow rebootmgr_t to cope with systemd and dbus messaging
+
 -------------------------------------------------------------------
 Thu Aug 26 07:37:05 UTC 2021 - Johannes Segitz <jsegitz@suse.com>