diff --git a/kernel/selinux-testsuite/runtest.sh b/kernel/selinux-testsuite/runtest.sh
index b12338c..188c240 100755
--- a/kernel/selinux-testsuite/runtest.sh
+++ b/kernel/selinux-testsuite/runtest.sh
@@ -304,6 +304,10 @@ rlJournalStart
         } | rlRun "tee -a tests/tun_tap/tun_common.h" 0 \
             "Harden tun_tap test against missing defs"
 
+        # needed to avoid a flood of AVCs when run via restraint
+        rlRun "sed -i 's/type unconfined_t;/type unconfined_t, unconfined_service_t;/' policy/test_policy.if" 0
+        rlRun "sed -i 's/\\(allow \\\$1 initrc_t:fd use;\\)/\\1 allow \$1 unconfined_service_t:fd use;/' policy/test_policy.if" 0
+
         exclude_tests=""
         force_tests=""
         for file in ./tests/nnp*/execnnp.c; do