diff --git a/src/permission/child_process_permission.cc b/src/permission/child_process_permission.cc
index 1c2c5860a6c45d..7151eb15f90da2 100644
--- a/src/permission/child_process_permission.cc
+++ b/src/permission/child_process_permission.cc
@@ -9,7 +9,7 @@ namespace permission {
 
 // Currently, ChildProcess manage a single state
 // Once denied, it's always denied
-void ChildProcessPermission::Apply(const std::string& deny,
+void ChildProcessPermission::Apply(const std::string& allow,
                                    PermissionScope scope) {
   deny_all_ = true;
 }
diff --git a/src/permission/child_process_permission.h b/src/permission/child_process_permission.h
index 4a170478eee4a7..b67169f1c4e180 100644
--- a/src/permission/child_process_permission.h
+++ b/src/permission/child_process_permission.h
@@ -12,7 +12,7 @@ namespace permission {
 
 class ChildProcessPermission final : public PermissionBase {
  public:
-  void Apply(const std::string& deny, PermissionScope scope) override;
+  void Apply(const std::string& allow, PermissionScope scope) override;
   bool is_granted(PermissionScope perm,
                   const std::string_view& param = "") override;
 
diff --git a/src/permission/fs_permission.h b/src/permission/fs_permission.h
index f393c6a042e662..7ac987c7118ca1 100644
--- a/src/permission/fs_permission.h
+++ b/src/permission/fs_permission.h
@@ -16,7 +16,7 @@ namespace permission {
 
 class FSPermission final : public PermissionBase {
  public:
-  void Apply(const std::string& deny, PermissionScope scope) override;
+  void Apply(const std::string& allow, PermissionScope scope) override;
   bool is_granted(PermissionScope perm, const std::string_view& param) override;
 
   // For debugging purposes, use the gist function to print the whole tree
diff --git a/src/permission/permission.h b/src/permission/permission.h
index 72928f853c4b87..61341ab29134f2 100644
--- a/src/permission/permission.h
+++ b/src/permission/permission.h
@@ -46,7 +46,7 @@ class Permission {
                                 const std::string_view& res);
 
   // CLI Call
-  void Apply(const std::string& deny, PermissionScope scope);
+  void Apply(const std::string& allow, PermissionScope scope);
   void EnablePermissions();
 
  private:
diff --git a/src/permission/permission_base.h b/src/permission/permission_base.h
index c02b1917a6faab..86fefa06e65c57 100644
--- a/src/permission/permission_base.h
+++ b/src/permission/permission_base.h
@@ -36,7 +36,7 @@ enum class PermissionScope {
 
 class PermissionBase {
  public:
-  virtual void Apply(const std::string& deny, PermissionScope scope) = 0;
+  virtual void Apply(const std::string& allow, PermissionScope scope) = 0;
   virtual bool is_granted(PermissionScope perm,
                           const std::string_view& param = "") = 0;
 };
diff --git a/src/permission/worker_permission.cc b/src/permission/worker_permission.cc
index 16356be17b39e9..69c89a4a4fea87 100644
--- a/src/permission/worker_permission.cc
+++ b/src/permission/worker_permission.cc
@@ -9,7 +9,7 @@ namespace permission {
 
 // Currently, PolicyDenyWorker manage a single state
 // Once denied, it's always denied
-void WorkerPermission::Apply(const std::string& deny, PermissionScope scope) {
+void WorkerPermission::Apply(const std::string& allow, PermissionScope scope) {
   deny_all_ = true;
 }
 
diff --git a/src/permission/worker_permission.h b/src/permission/worker_permission.h
index 4d714cfb5d718b..71681a4485a82f 100644
--- a/src/permission/worker_permission.h
+++ b/src/permission/worker_permission.h
@@ -12,7 +12,7 @@ namespace permission {
 
 class WorkerPermission final : public PermissionBase {
  public:
-  void Apply(const std::string& deny, PermissionScope scope) override;
+  void Apply(const std::string& allow, PermissionScope scope) override;
   bool is_granted(PermissionScope perm,
                   const std::string_view& param = "") override;