diff --git a/buildroot-external/apparmor/hassio-supervisor b/buildroot-external/apparmor/hassio-supervisor
index b3332acae..62a3830c0 100644
--- a/buildroot-external/apparmor/hassio-supervisor
+++ b/buildroot-external/apparmor/hassio-supervisor
@@ -10,6 +10,7 @@ profile hassio-supervisor flags=(attach_disconnected,mediate_deleted) {
   deny network raw,
   deny network packet,
 
+  /bin/busybox ix,
   /usr/bin/python3 ix,
   /usr/bin/socat cx,
   /usr/bin/gdbus cx,
@@ -28,11 +29,10 @@ profile hassio-supervisor flags=(attach_disconnected,mediate_deleted) {
   deny /sys/** wl,
   deny /usr/** wl,
 
-  /data/** rw,
-  /var/run/docker.sock rw,
-
   /proc/** r,
   /sys/** r,
+  /data/** rw,
+  /var/run/docker.sock rw,
 
   profile /usr/bin/socat {
     #include <abstractions/base>