diff --git a/apparmor.d/groups/firewall/firewall-applet b/apparmor.d/groups/firewall/firewall-applet
index 280bd9d04..bd144b7e2 100644
--- a/apparmor.d/groups/firewall/firewall-applet
+++ b/apparmor.d/groups/firewall/firewall-applet
@@ -21,6 +21,9 @@ profile firewall-applet @{exec_path} flags=(attach_disconnected) {
 
   owner @{PROC}/@{pid}/cmdline r,
   owner @{PROC}/@{pid}/mounts r,
+  owner @{PROC}/@{pid}/cgroup r,
+
+  owner @{user_config_dirs}/firewall/applet.conf rwkl,
 
   include if exists <local/firewall-applet>
 }