diff --git a/README.md b/README.md
index 84971347..f8d6e6da 100644
--- a/README.md
+++ b/README.md
@@ -51,7 +51,7 @@ For Python dependencies, see requirements.txt
 
 ## Files of interest:
 
-* `cowrie.cfg` - Cowrie's configuration file. Default values can be found in `cowrie.cfg.dist`
+* `cowrie.cfg` - Cowrie's configuration file. Default values can be found in `etc/cowrie.cfg.dist`
 * `data/fs.pickle` - fake filesystem
 * `data/userdb.txt` - credentials allowed or disallowed to access the honeypot
 * `dl/` - files transferred from the attacker to the honeypot are stored here
diff --git a/cowrie/core/config.py b/cowrie/core/config.py
index cb04adc7..629d431a 100644
--- a/cowrie/core/config.py
+++ b/cowrie/core/config.py
@@ -42,4 +42,4 @@ def readConfigFile(cfgfile):
     return parser
 
 
-CONFIG = readConfigFile(("cowrie.cfg.dist", "etc/cowrie.cfg", "cowrie.cfg"))
+CONFIG = readConfigFile(("etc/cowrie.cfg.dist", "etc/cowrie.cfg", "cowrie.cfg"))
diff --git a/cowrie.cfg.dist b/etc/cowrie.cfg.dist
similarity index 100%
rename from cowrie.cfg.dist
rename to etc/cowrie.cfg.dist