diff --git a/apparmor.d/groups/network/socat b/apparmor.d/groups/network/socat
index 847b3636b..df5e874d1 100644
--- a/apparmor.d/groups/network/socat
+++ b/apparmor.d/groups/network/socat
@@ -7,7 +7,7 @@ abi <abi/3.0>,
 
 include <tunables/global>
 
-@{exec_path} = /usr/bin/socat
+@{exec_path} = @{bin}/socat
 profile socat @{exec_path} {
   include <abstractions/base>
   include <abstractions/nameservice-strict>
@@ -29,6 +29,8 @@ profile socat @{exec_path} {
   # fuctionalities that is why it is necessary to allow whole `network`
   network,
 
+  @{exec_path} mr,
+
   # Enale /dev/ptmx access for testsuite
   # /dev/ptmx rw,