diff --git a/wolfi-baselayout.yaml b/wolfi-baselayout.yaml
index 930c4a50da79..f81b752f5cec 100644
--- a/wolfi-baselayout.yaml
+++ b/wolfi-baselayout.yaml
@@ -1,7 +1,7 @@
 package:
   name: wolfi-baselayout
   version: 20230201
-  epoch: 26
+  epoch: 27
   description: "baselayout data for Wolfi"
   copyright:
     - license: MIT
@@ -53,9 +53,11 @@ pipeline:
         mkdir -p "${{targets.destdir}}"/${i}
       done
 
-      # be explicit here, and create tmp as 1777 (drwxrwxrwt) even though
-      # apko does this itself in its baseDirectories / initDB
+      # be explicit here, and create tmp and var/tmp as 1777 (drwxrwxrwt).
+      # apko also sets /tmp to 1777 in its baseDirectories / initDB,
+      # but does not handle /var/tmp.
       chmod 1777 "${{targets.destdir}}/tmp"
+      chmod 1777 "${{targets.destdir}}/var/tmp"
 
       # usr-merge
       ln -sf usr/bin ${{targets.destdir}}/sbin