diff --git a/apparmor.d/groups/gnome/gnome-boxes b/apparmor.d/groups/gnome/gnome-boxes
index 2462c2071..16aa4e862 100644
--- a/apparmor.d/groups/gnome/gnome-boxes
+++ b/apparmor.d/groups/gnome/gnome-boxes
@@ -36,6 +36,7 @@ profile gnome-boxes @{exec_path} {
   @{bin}/virsh      rCx -> virsh,
   @{bin}/virtqemud  rPUx,
 
+  /usr/share/ladspa/rdf/{,*} r,
   /usr/share/osinfo/{,**} r,
   /usr/share/gnome-boxes/{,**} r,
 
@@ -55,6 +56,8 @@ profile gnome-boxes @{exec_path} {
   owner @{user_config_dirs}/gnome-boxes/ rw,
   owner @{user_config_dirs}/gnome-boxes/** rwk,
 
+  owner @{user_share_dirs}/gnome-boxes/images/ rw,
+
   owner @{tmp}/.goutputstream-@{rand6} rw,
   owner @{tmp}/*.iso-@{rand6} rw,
   owner @{tmp}/*.svg-@{rand6} rw,
@@ -66,6 +69,7 @@ profile gnome-boxes @{exec_path} {
 
   @{run}/udev/data/c@{dynamic}:@{int} r,  # For dynamic assignment range 234 to 254, 384 to 511
 
+        @{sys}/devices/@{pci}/usb@{int}/** r,
   owner @{sys}/fs/cgroup/user.slice/user-@{uid}.slice/user@@{uid}.service/app.slice/app-dbus*org.gnome.Boxes.slice/*/memory.* r,
 
         @{PROC}/sys/net/ipv6/conf/all/disable_ipv6 r,