diff --git a/permissivedomains.cil b/permissivedomains.cil
index 400bcf60c11dce880adef60eb53e7128b72cc7fe..12c6c193d5351001e68f74dd2d50436693c4a555 100644
--- a/permissivedomains.cil
+++ b/permissivedomains.cil
@@ -1,2 +1,16 @@
 (roleattributeset cil_gen_require system_r)
 
+(optional permissivedomains_optional_1
+    (typeattributeset cil_gen_require tangd_t)
+    (typepermissive tangd_t)
+)
+
+(optional permissivedomains_optional_2
+    (typeattributeset cil_gen_require opafm_t)
+    (typepermissive opafm_t)
+)
+
+(optional permissivedomains_optional_3
+    (typeattributeset cil_gen_require boltd_t)
+    (typepermissive boltd_t)
+)
diff --git a/selinux-policy.spec b/selinux-policy.spec
index 2a76bb16bb4da8c21fe98e40f792d3b46aa65171..f3585b8843ae76751bae88eadf50593430824023 100644
--- a/selinux-policy.spec
+++ b/selinux-policy.spec
@@ -12,7 +12,7 @@
 Summary: SELinux policy configuration
 Name:    selinux-policy
 Version: 3.14.2
-Release: 58
+Release: 59
 License: GPLv2+
 URL:     https://github.com/fedora-selinux/selinux-policy/
 
@@ -730,6 +730,9 @@ exit 0
 %endif
 
 %changelog
+* Wed Sep 16 2020 openEuler Buildteam <buildteam@openeuler.org> - 3.14.2-59
+- set domains to permissive
+
 * Wed Sep 10 2020 openEuler Buildteam <buildteam@openeuler.org> - 3.14.2-58
 - add allow-systemd-machined-create-userdbd-runtime-sock-file.patch