diff --git a/cluster/services/idm/policies/infra-admins.nix b/cluster/services/idm/policies/infra-admins.nix
index 633eaef..8857efe 100644
--- a/cluster/services/idm/policies/infra-admins.nix
+++ b/cluster/services/idm/policies/infra-admins.nix
@@ -16,8 +16,8 @@
   };
 
   idm.tmpfiles.rules = [
-    "a+ /run/log/journal/%m - - - - d:group:infra_admins:r-x"
-    "a+ /run/log/journal/%m - - - - group:infra_admins:r-x"
-    "a+ /run/log/journal/%m/*.journal* - - - - d:group:infra_admins:r--"
+    "a+ /run/log/journal - - - - d:group:infra_admins:r-x,group:infra_admins:r-x"
+    "a+ /run/log/journal/%m - - - - d:group:infra_admins:r-x,group:infra_admins:r-x"
+    "a+ /run/log/journal/%m/*.journal* - - - - group:infra_admins:r--"
   ];
 }