diff --git a/systemd.spec b/systemd.spec
index d9101d5..64c27c3 100644
--- a/systemd.spec
+++ b/systemd.spec
@@ -43,7 +43,7 @@ Name:           systemd
 Url:            https://pagure.io/centos-sig-hyperscale/systemd
 %if %{without inplace}
 Version:        252.4
-Release:        598.8%{?dist}
+Release:        598.9%{?dist}
 %else
 # determine the build information from local checkout
 Version:        %(tools/meson-vcs-tag.sh . error | sed -r 's/-([0-9])/.^\1/; s/-g/_g/')
@@ -1156,6 +1156,9 @@ fi
 
 %changelog
 
+* Fri Feb 17 2023 Daan De Meyer <daan.j.demeyer@gmail.com> - 252.4-598.9
+- Work around unsupported selinux directive on centos stream 8
+
 * Fri Feb 17 2023 Daan De Meyer <daan.j.demeyer@gmail.com> - 252.4-598.8
 - Fix changelog
 
diff --git a/systemd_hs.te b/systemd_hs.te
index 98347d9..d5d6ea6 100644
--- a/systemd_hs.te
+++ b/systemd_hs.te
@@ -46,7 +46,9 @@ allow syslogd_t user_tmp_t:dir search;
 allow systemd_machined_t init_var_run_t:sock_file manage_sock_file_perms;
 
 #============= systemd_networkd_t ==============
-allow systemd_networkd_t system_dbusd_var_run_t:sock_file watch;
+# watch is not defined on centos stream 8 so use a glob to get around that.
+allow systemd_networkd_t system_dbusd_var_run_t:sock_file *;
+
 
 selinux_use_status_page(init_t)
 selinux_use_status_page(systemd_hostnamed_t)