diff --git a/docs/privileges.md b/docs/privileges.md
index b10e7ca..a814c2d 100644
--- a/docs/privileges.md
+++ b/docs/privileges.md
@@ -109,7 +109,7 @@ Path used | Owner | What is created or changed
 `/var/cache/banger/...` | owner, 0700 | Bundle and OCI download cache.
 `/run/banger/...` | owner, 0700 | Owner daemon socket and per-VM firecracker API + vsock sockets.
 `/run/banger-root/...` | root, 0711 | Root-helper socket dir; the socket itself is 0600.
-`~/.config/banger/banger.toml` | owner | Optional user config. Read by the owner daemon at startup.
+`~/.config/banger/config.toml` | owner | Optional user config. Read by the owner daemon at startup.
 
 Outside these directories, banger does not write to the host filesystem
 during normal operation. The two exceptions are file-sync (the user