diff --git a/apparmor.d/groups/ssh/ssh-keygen b/apparmor.d/groups/ssh/ssh-keygen
index 1b6dd5e98..738268b0a 100644
--- a/apparmor.d/groups/ssh/ssh-keygen
+++ b/apparmor.d/groups/ssh/ssh-keygen
@@ -15,6 +15,8 @@ profile ssh-keygen @{exec_path} {
 
   @{exec_path} mr,
 
+  @{lib}/{,ssh/}ssh-sk-helper rPx -> ssh-sk-helper,
+
   /etc/ssh/moduli rw,
   /etc/ssh/ssh_host_*_key* rw,