diff --git a/apparmor.d/groups/pacman/mkinitcpio b/apparmor.d/groups/pacman/mkinitcpio
index 785f4f448..9eafb72a9 100644
--- a/apparmor.d/groups/pacman/mkinitcpio
+++ b/apparmor.d/groups/pacman/mkinitcpio
@@ -84,8 +84,9 @@ profile mkinitcpio @{exec_path} flags=(attach_disconnected) {
 
   # Manage /boot
   / r,
-  /boot/ r,
-  /{boot,efi}/EFI/{,**} rw,
+  @{efi}/ r,
+  @{efi}/EFI/{,**} rw,
+  @{efi}/@{hex32}/{,**} rw,
   /boot/initramfs-*.img* rw,
   /boot/vmlinuz-* r,