diff --git a/cjdns.el6.patch b/cjdns.el6.patch
index 9e29dc4..a71e758 100644
--- a/cjdns.el6.patch
+++ b/cjdns.el6.patch
@@ -24,7 +24,7 @@ diff -up ./contrib/selinux/cjdns.te.el6 ./contrib/selinux/cjdns.te
  allow cjdns_t node_t:udp_socket node_bind;
  allow cjdns_t port_t:udp_socket name_bind;
 -allow cjdns_t unreserved_port_t:udp_socket name_bind;
- allow cjdns_t self:netlink_route_socket { bind create getattr nlmsg_read read write };
+ allow cjdns_t self:netlink_route_socket { bind create getattr nlmsg_read read write nlmsg_write };
  allow cjdns_t self:packet_socket { bind create ioctl read write };
  allow cjdns_t self:tun_socket create;
 diff -up ./node_build/FindPython2.js.el6 ./node_build/FindPython2.js
diff --git a/cjdns.spec b/cjdns.spec
index 87adf9a..5412a99 100644
--- a/cjdns.spec
+++ b/cjdns.spec
@@ -467,7 +467,7 @@ fi
 %{_bindir}/graphStats
 
 %changelog
-* Thu Jun 23 2016 Stuart D. Gathman <stuart@gathman.org> 17.4-4
+* Fri Jun 24 2016 Stuart D. Gathman <stuart@gathman.org> 17.4-4
 - cjdns-selinux: allow cjdroute to manipulate route table
 
 * Thu Jun 23 2016 Stuart D. Gathman <stuart@gathman.org> 17.4-3