diff --git a/rel/files/acl.config b/rel/files/acl.config
index f7ce98042..0d8962d49 100644
--- a/rel/files/acl.config
+++ b/rel/files/acl.config
@@ -20,7 +20,7 @@
 
 {allow, {ipaddr, "127.0.0.1"}, pubsub, ["$SYS/#", "#"]}.
 
-{deny, all, subscribe, ["$SYS/#", "#"]}.
+{deny, all, subscribe, [{eq, "$SYS/#"}, {eq, "#"}]}.
 
 {allow, all}.