diff --git a/apparmor.d/groups/network/NetworkManager b/apparmor.d/groups/network/NetworkManager
index dbd6e4984..9b912d105 100644
--- a/apparmor.d/groups/network/NetworkManager
+++ b/apparmor.d/groups/network/NetworkManager
@@ -89,17 +89,17 @@ profile NetworkManager @{exec_path} flags=(attach_disconnected) {
 
   /{usr/,}bin/{,ba,da}sh rix,
 
-  /{usr/,}bin/dnsmasq                            rPx,
-  /{usr/,}bin/resolvconf                         rPx,
-  /{usr/,}bin/systemctl                          rPx -> child-systemctl,
-  @{libexec}/nm-dhcp-helper                      rPx,
-  @{libexec}/nm-dispatcher                       rPx,
-  @{libexec}/nm-iface-helper                     rPx,
-  @{libexec}/nm-initrd-generator                 rPx,
-  @{libexec}/nm-openvpn-auth-dialog              rPx,
-  @{libexec}/nm-openvpn-service                  rPx,
-  @{libexec}/nm-openvpn-service-openvpn-helper   rPx,
-  @{libexec}/nm-daemon-helper                    rPx,
+  /{usr/,}bin/dnsmasq                                            rPx,
+  /{usr/,}bin/resolvconf                                         rPx,
+  /{usr/,}bin/systemctl                                          rPx -> child-systemctl,
+  @{libexec}/{,NetworkManager/}nm-dhcp-helper                    rPx,
+  @{libexec}/{,NetworkManager/}nm-dispatcher                     rPx,
+  @{libexec}/{,NetworkManager/}nm-iface-helper                   rPx,
+  @{libexec}/{,NetworkManager/}nm-initrd-generator               rPx,
+  @{libexec}/{,NetworkManager/}nm-openvpn-auth-dialog            rPx,
+  @{libexec}/{,NetworkManager/}nm-openvpn-service                rPx,
+  @{libexec}/{,NetworkManager/}nm-openvpn-service-openvpn-helper rPx,
+  @{libexec}/{,NetworkManager/}nm-daemon-helper                  rPx,
 
   /usr/share/gvfs/remote-volume-monitors/{,*.monitor} r,
 
diff --git a/apparmor.d/groups/network/nm-daemon-helper b/apparmor.d/groups/network/nm-daemon-helper
index 4419955e1..8e33cbf85 100644
--- a/apparmor.d/groups/network/nm-daemon-helper
+++ b/apparmor.d/groups/network/nm-daemon-helper
@@ -6,7 +6,7 @@ abi <abi/3.0>,
 
 include <tunables/global>
 
-@{exec_path} = @{libexec}/nm-daemon-helper
+@{exec_path} = @{libexec}/{,NetworkManager/}nm-daemon-helper
 profile nm-daemon-helper @{exec_path} {
   include <abstractions/base>
   include <abstractions/nameservice-strict>
diff --git a/apparmor.d/groups/network/nm-dhcp-helper b/apparmor.d/groups/network/nm-dhcp-helper
index 7586b7c2a..e72f3458c 100644
--- a/apparmor.d/groups/network/nm-dhcp-helper
+++ b/apparmor.d/groups/network/nm-dhcp-helper
@@ -6,7 +6,7 @@ abi <abi/3.0>,
 
 include <tunables/global>
 
-@{exec_path} = @{libexec}/nm-dhcp-helper
+@{exec_path} = @{libexec}/{,NetworkManager/}nm-dhcp-helper
 profile nm-dhcp-helper @{exec_path} {
   include <abstractions/base>
   include <abstractions/dbus>
diff --git a/apparmor.d/groups/network/nm-iface-helper b/apparmor.d/groups/network/nm-iface-helper
index f01f185c7..e410367c1 100644
--- a/apparmor.d/groups/network/nm-iface-helper
+++ b/apparmor.d/groups/network/nm-iface-helper
@@ -6,7 +6,7 @@ abi <abi/3.0>,
 
 include <tunables/global>
 
-@{exec_path} = @{libexec}/nm-iface-helper
+@{exec_path} = @{libexec}/{,NetworkManager/}nm-iface-helper
 profile nm-iface-helper @{exec_path} {
   include <abstractions/base>
 
diff --git a/apparmor.d/groups/network/nm-initrd-generator b/apparmor.d/groups/network/nm-initrd-generator
index e0a8ea8bd..b51c8ac29 100644
--- a/apparmor.d/groups/network/nm-initrd-generator
+++ b/apparmor.d/groups/network/nm-initrd-generator
@@ -6,7 +6,7 @@ abi <abi/3.0>,
 
 include <tunables/global>
 
-@{exec_path} = @{libexec}/nm-initrd-generator
+@{exec_path} = @{libexec}/{,NetworkManager/}nm-initrd-generator
 profile nm-initrd-generator @{exec_path} {
   include <abstractions/base>
 
diff --git a/apparmor.d/groups/network/nm-openvpn-auth-dialog b/apparmor.d/groups/network/nm-openvpn-auth-dialog
index 603e4f508..5936aa84d 100644
--- a/apparmor.d/groups/network/nm-openvpn-auth-dialog
+++ b/apparmor.d/groups/network/nm-openvpn-auth-dialog
@@ -6,7 +6,7 @@ abi <abi/3.0>,
 
 include <tunables/global>
 
-@{exec_path} = @{libexec}/nm-openvpn-auth-dialog
+@{exec_path} = @{libexec}/{,NetworkManager/}nm-openvpn-auth-dialog
 profile nm-openvpn-auth-dialog @{exec_path} {
   include <abstractions/base>
 
diff --git a/apparmor.d/groups/network/nm-openvpn-service b/apparmor.d/groups/network/nm-openvpn-service
index 8ddebe169..edbdfc23c 100644
--- a/apparmor.d/groups/network/nm-openvpn-service
+++ b/apparmor.d/groups/network/nm-openvpn-service
@@ -6,7 +6,7 @@ abi <abi/3.0>,
 
 include <tunables/global>
 
-@{exec_path} = @{libexec}/nm-openvpn-service
+@{exec_path} = @{libexec}/{,NetworkManager/}nm-openvpn-service
 profile nm-openvpn-service @{exec_path} {
   include <abstractions/base>
   include <abstractions/nameservice-strict>
@@ -18,8 +18,8 @@ profile nm-openvpn-service @{exec_path} {
 
   @{exec_path} mr,
 
-  @{libexec}/nm-openvpn-auth-dialog rPx,
-  @{libexec}/nm-openvpn-service-openvpn-helper rPx,
+  @{libexec}/{,NetworkManager/}nm-openvpn-auth-dialog rPx,
+  @{libexec}/{,NetworkManager/}nm-openvpn-service-openvpn-helper rPx,
   /{usr/,}{s,}bin/openvpn rPx,
   /{usr/,}bin/{,ba,da}sh rix,
   /{usr/,}bin/kmod rPx,
diff --git a/apparmor.d/groups/network/nm-openvpn-service-openvpn-helper b/apparmor.d/groups/network/nm-openvpn-service-openvpn-helper
index 4fa764bc4..d602d6175 100644
--- a/apparmor.d/groups/network/nm-openvpn-service-openvpn-helper
+++ b/apparmor.d/groups/network/nm-openvpn-service-openvpn-helper
@@ -6,7 +6,7 @@ abi <abi/3.0>,
 
 include <tunables/global>
 
-@{exec_path} = @{libexec}/nm-openvpn-service-openvpn-helper
+@{exec_path} = @{libexec}/{,NetworkManager/}nm-openvpn-service-openvpn-helper
 profile nm-openvpn-service-openvpn-helper @{exec_path} {
   include <abstractions/base>