diff --git a/apparmor.d/groups/firewall/firewall-applet b/apparmor.d/groups/firewall/firewall-applet
index 415a0bc58..bd144b7e2 100644
--- a/apparmor.d/groups/firewall/firewall-applet
+++ b/apparmor.d/groups/firewall/firewall-applet
@@ -23,7 +23,7 @@ profile firewall-applet @{exec_path} flags=(attach_disconnected) {
   owner @{PROC}/@{pid}/mounts r,
   owner @{PROC}/@{pid}/cgroup r,
 
-  owner @{user_config_dirs}/firewall/applet.conf rw,
+  owner @{user_config_dirs}/firewall/applet.conf rwkl,
 
   include if exists <local/firewall-applet>
 }