diff --git a/units/systemd-journal-upload.service.in b/units/systemd-journal-upload.service.in
index b9eab21542..d00b929211 100644
--- a/units/systemd-journal-upload.service.in
+++ b/units/systemd-journal-upload.service.in
@@ -28,6 +28,7 @@ RestrictRealtime=yes
 RestrictNamespaces=yes
 RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6
 SystemCallArchitectures=native
+ReadWritePaths=/var/lib/systemd/journal-upload
 
 # If there are many split up journal files we need a lot of fds to
 # access them all and combine