diff --git a/apparmor.d/groups/kde/kded5 b/apparmor.d/groups/kde/kded5
index e2f5e8343..ef2c436e3 100644
--- a/apparmor.d/groups/kde/kded5
+++ b/apparmor.d/groups/kde/kded5
@@ -77,13 +77,16 @@ profile kded5 @{exec_path} {
   owner @{user_config_dirs}/gtk-{3,4}.0/{,**} rwl,
   owner @{user_config_dirs}/gtk-{3,4}/settings.ini.lock rk,
   owner @{user_config_dirs}/kcminputrc r,
-  owner @{user_config_dirs}/kconf_updaterc r,
+  owner @{user_config_dirs}/kconf_updaterc rw,
+  owner @{user_config_dirs}/kconf_updaterc.lock rwk,
   owner @{user_config_dirs}/kcookiejarrc r,
   owner @{user_config_dirs}/kdebugrc r,
   owner @{user_config_dirs}/kded5rc.lock rwk,
   owner @{user_config_dirs}/kded5rc{,.@{rand6}} rwl -> @{user_config_dirs}/#@{int},
   owner @{user_config_dirs}/kdedefaults/{,**} r,
   owner @{user_config_dirs}/kdeglobals r,
+  owner @{user_config_dirs}/khotkeysrc{,.@{rand6}} rw,
+  owner @{user_config_dirs}/khotkeysrc.@{rand6} l -> @{user_config_dirs}/#@{int},
   owner @{user_config_dirs}/khotkeysrc.lock rwk,
   owner @{user_config_dirs}/kioslaverc{,.@{rand6}} rwl -> @{user_config_dirs}/#@{int},
   owner @{user_config_dirs}/ktimezonedrc r,
@@ -132,6 +135,8 @@ profile kded5 @{exec_path} {
     include <abstractions/base>
     include <abstractions/consoles>
 
+    capability sys_ptrace,
+
     ptrace (read),
 
     @{bin}/pgrep mr,