diff --git a/salt/sys-cacher/files/admin/policy/default.policy b/salt/sys-cacher/files/admin/policy/default.policy
index ec0a21b..371776e 100644
--- a/salt/sys-cacher/files/admin/policy/default.policy
+++ b/salt/sys-cacher/files/admin/policy/default.policy
@@ -10,6 +10,6 @@ qubes.ConnectTCP +8082 {{ sls_path }}-browser  @default  allow target={{ sls_pat
 qubes.ConnectTCP *     {{ sls_path }}-browser  @anyvm    deny
 qubes.UpdatesProxy * @tag:whonix-updatevm     @default allow  target=sys-whonix
 qubes.UpdatesProxy * @tag:whonix-updatevm     @anyvm   deny
-qubes.UpdatesProxy * @tag:{{ sls_path }}-updatevm @default  allow  target={{ sls_path }}
-qubes.UpdatesProxy * @tag:{{ sls_path }}-updatevm @anyvm    deny
+qubes.UpdatesProxy * @tag:updatevm-{{ sls_path }} @default  allow  target={{ sls_path }}
+qubes.UpdatesProxy * @tag:updatevm-{{ sls_path }} @anyvm    deny
 ## vim:ft=qrexecpolicy