diff --git a/modules-targeted.conf b/modules-targeted.conf
index 76e373d..e916ffa 100644
--- a/modules-targeted.conf
+++ b/modules-targeted.conf
@@ -202,6 +202,13 @@ automount = module
 avahi = module
 
 # Layer: services
+# Module: bcfg2
+#
+# Configuration management server
+#
+bcfg2 = module
+
+# Layer: services
 # Module: boinc
 #
 # Berkeley Open Infrastructure for Network Computing
diff --git a/permissivedomains.te b/permissivedomains.te
index b85ea35..70fe226 100644
--- a/permissivedomains.te
+++ b/permissivedomains.te
@@ -2,6 +2,14 @@ policy_module(permissivedomains,17)
 
 optional_policy(`
 	gen_require(`
+		type bcfg2_t;
+	')
+
+	permissive bcfg2_t;
+')
+
+optional_policy(`
+	gen_require(`
 		type couchdb_t;
 	')