diff --git a/playbooks/roles/bifrost-ironic-install/files/ironic_policy.te b/playbooks/roles/bifrost-ironic-install/files/ironic_policy.te
index 847c616ab..7eecd29ff 100644
--- a/playbooks/roles/bifrost-ironic-install/files/ironic_policy.te
+++ b/playbooks/roles/bifrost-ironic-install/files/ironic_policy.te
@@ -16,4 +16,4 @@ require {
 allow httpd_t root_t:file open;
 allow httpd_t default_t:file open;
 allow httpd_t root_t:file { read getattr };
-allow httpd_t default_t:file open;
+allow httpd_t default_t:file { read getattr };