diff --git a/public/iorapd.te b/public/iorapd.te
index abf7adbac..531c383d6 100644
--- a/public/iorapd.te
+++ b/public/iorapd.te
@@ -36,6 +36,9 @@ allow iorapd self:global_capability_class_set sys_nice;
 # tracing sessions and read trace data.
 unix_socket_connect(iorapd, traced_consumer, traced)
 
+# Allow iorapd to execute compilation (iorap.cmd.compiler) in idle time.
+allow iorapd system_file:file execute_no_trans;
+
 ###
 ### neverallow rules
 ###