diff --git a/modules/openclaw.nix b/modules/openclaw.nix
index 5f681d1..6c67caa 100644
--- a/modules/openclaw.nix
+++ b/modules/openclaw.nix
@@ -103,7 +103,7 @@ in
         # Security
         PrivateTmp = true;
         ProtectSystem = "strict";
-        ReadWritePaths = [ configDir dataDir workspaceDir ];
+        ReadWritePaths = [ "/var/lib/openclaw" configDir dataDir workspaceDir ];
         NoNewPrivileges = true;
       };
     };