diff --git a/files/stig/chrony-dhcp-dispatcher.te b/files/stig/chrony-dhcp-dispatcher.te
index 1ad644e..33d0a11 100644
--- a/files/stig/chrony-dhcp-dispatcher.te
+++ b/files/stig/chrony-dhcp-dispatcher.te
@@ -1,4 +1,8 @@
-policy_module(chrony_dhcp_dispatcher, 1.0.0)
+# Raw module-policy syntax (compiled with `checkmodule -M -m`), NOT the refpolicy
+# `policy_module()` m4 macro — that macro is only expanded by the refpolicy
+# Makefile (/usr/share/selinux/devel) and checkmodule rejects it ("no module
+# specification found"). `module <name> <version>;` is what checkmodule wants.
+module chrony_dhcp_dispatcher 1.0.0;
 
 ########################################
 # Let chronyd reply to the chronyc that our NetworkManager dispatcher script