diff --git a/roles/nagios_client/files/selinux/fi-nrpe.pp b/roles/nagios_client/files/selinux/fi-nrpe.pp
index 1243b0e73e..0e71b44bab 100644
Binary files a/roles/nagios_client/files/selinux/fi-nrpe.pp and b/roles/nagios_client/files/selinux/fi-nrpe.pp differ
diff --git a/roles/nagios_client/files/selinux/fi-nrpe.te b/roles/nagios_client/files/selinux/fi-nrpe.te
index 91bcdcc972..b43802782a 100644
--- a/roles/nagios_client/files/selinux/fi-nrpe.te
+++ b/roles/nagios_client/files/selinux/fi-nrpe.te
@@ -1,11 +1,15 @@
-module fi-nrpe 1.0;
+module fi-nrpe 1.1;
 
 require {
     type nagios_system_plugin_t;
+    type nagios_admin_plugin_t;
     type nrpe_exec_t;
-    class file getattr;
+    type bin_t;
+    class file { getattr map execute };
 }
 
 #============= nagios_system_plugin_t ==============
 allow nagios_system_plugin_t nrpe_exec_t:file getattr;
 
+# This is needed for e.g. check_file_age, which is a perl script
+allow nagios_admin_plugin_t bin_t:file { map execute };