diff --git a/sdk_container/src/third_party/coreos-overlay/sys-block/open-iscsi/files/open-iscsi.conf b/sdk_container/src/third_party/coreos-overlay/sys-block/open-iscsi/files/open-iscsi.conf
new file mode 100644
index 0000000000..63f2a9cc2c
--- /dev/null
+++ b/sdk_container/src/third_party/coreos-overlay/sys-block/open-iscsi/files/open-iscsi.conf
@@ -0,0 +1,2 @@
+d	/var/db/iscsi	0700	root	root	-	-
+
diff --git a/sdk_container/src/third_party/coreos-overlay/sys-block/open-iscsi/open-iscsi-2.0.873.ebuild b/sdk_container/src/third_party/coreos-overlay/sys-block/open-iscsi/open-iscsi-2.0.873.ebuild
index 4004d423b1..831f9b575a 100644
--- a/sdk_container/src/third_party/coreos-overlay/sys-block/open-iscsi/open-iscsi-2.0.873.ebuild
+++ b/sdk_container/src/third_party/coreos-overlay/sys-block/open-iscsi/open-iscsi-2.0.873.ebuild
@@ -86,7 +86,7 @@ src_install() {
 	doins "${FILESDIR}"/iscsidev.sh
 	insopts -m0644
 
-	keepdir /var/db/iscsi
-	fperms 700 /var/db/iscsi
+	systemd_dotmpfilesd "${FILESDIR}"/open-iscsi.conf
+
 	fperms 600 /etc/iscsi/iscsid.conf
 }