diff --git a/policy/modules/services/openvpn.fc b/policy/modules/services/openvpn.fc
index b2ca95f03..c09500885 100644
--- a/policy/modules/services/openvpn.fc
+++ b/policy/modules/services/openvpn.fc
@@ -1,5 +1,5 @@
 /etc/openvpn(/.*)?	gen_context(system_u:object_r:openvpn_etc_t,s0)
-/etc/openvpn/ipp\.txt	--	gen_context(system_u:object_r:openvpn_etc_rw_t,s0)
+/etc/openvpn/([^/]+/)?ipp\.txt	--	gen_context(system_u:object_r:openvpn_etc_rw_t,s0)
 /etc/openvpn/openvpn-status\.log.* --	gen_context(system_u:object_r:openvpn_status_t,s0)
 
 /etc/rc\.d/init\.d/openvpn	--	gen_context(system_u:object_r:openvpn_initrc_exec_t,s0)