diff --git a/apparmor.d/groups/lxqt/lxqt-config-file-associations b/apparmor.d/groups/lxqt/lxqt-config-file-associations
index 707ad2ebc..9574c6309 100644
--- a/apparmor.d/groups/lxqt/lxqt-config-file-associations
+++ b/apparmor.d/groups/lxqt/lxqt-config-file-associations
@@ -3,35 +3,38 @@
 # Copyright (C) 2024 Besanon  <m231009ts@mailfence.com>
 # SPDX-License-Identifier: GPL-2.0-only
 
-abi <abi/3.0>,
+abi <abi/4.0>,
 
 include <tunables/global>
 
-@{exec_path} = @{bin}/lxqt-config-file-associations
-profile lxqt-config-file-associations @{exec_path} {
+@{exec_pathl} = @{bin}/lxqt-config-file-associations
+profile lxqt-config-file-associations @{exec_pathl} {
   include <abstractions/base>
   include <abstractions/gtk>
   include <abstractions/video>
-  include <abstractions/fontconfig-cache-read> 
   include <abstractions/lxqt>
   include <abstractions/qt5-shader-cache>
-  include <abstractions/bus-accessibility>
-  include <abstractions/bus-session>
+  include <abstractions/dbus-session-strict>
+  include <abstractions/dbus-accessibility-strict>
   include <abstractions/gvfs-open>
   include <abstractions/nameservice-strict>
-    
-  @{exec_path}				mr,
+      
+  @{exec_path}			mr,
  
-  owner @{user_config_dirs}/  	       r,  
-  owner @{user_config_dirs}/mimeapps*  rwk,  
+  owner @{user_config_dirs}/           r,
+  owner @{user_config_dirs}/mimeapps*  rwk,
   owner @{user_config_dirs}/lxqt-*     rwk,
   owner @{user_config_dirs}/lxqt/        r,
-  owner @{user_config_dirs}/lxqt/#@{int} rw,
+  owner @{user_config_dirs}/lxqt/#@{int} rwk,
   owner @{user_config_dirs}/lxqt/lxqt-config-file-associations.conf.lock rwk,
   owner @{user_config_dirs}/lxqt/lxqt-config-file-associations.conf kl -> @{user_config_dirs}/lxqt/#@{int},
-
+  owner @{user_config_dirs}/lxqt/lxqt-config-file-associations.conf.@{rand6} rwkl -> @{user_config_dirs}/lxqt/#@{int},
   owner /tmp/#@{int} rwk,
 
+  # only for tor if installed in /opt/tor:
+  owner /opt/tormedium/tor-browser/Browser/browser/chrome/icons/default/default128.png  r,
+  owner /opt/tor/tor-browser/Browser/browser/chrome/icons/default/default128.png 	r,
+
   /dev/tty				rw,
 
   include if exists <local/lxqt-config-file-associations>