diff --git a/refpolicy/policy/modules/kernel/devices.if b/refpolicy/policy/modules/kernel/devices.if
index dc0f3320..127feaae 100644
--- a/refpolicy/policy/modules/kernel/devices.if
+++ b/refpolicy/policy/modules/kernel/devices.if
@@ -271,13 +271,13 @@ class chr_file { getattr write ioctl };
 define(`devices_discard_data_stream',`
 requires_block_template(devices_discard_data_stream_depend,$2)
 allow $1 device_t:dir { getattr read search };
-allow $1 null_device_t:chr_file { getattr write };
+allow $1 null_device_t:chr_file { getattr append write };
 ')
 
 define(`devices_discard_data_stream_depend',`
 type device_t, null_device_t;
 class device_t:dir { getattr read search };
-class chr_file { getattr write };
+class chr_file { getattr append write };
 ')
 
 ########################################