diff --git a/buildroot-external/apparmor/hassio-supervisor b/buildroot-external/apparmor/hassio-supervisor
index d5cd72691..c88d4b779 100644
--- a/buildroot-external/apparmor/hassio-supervisor
+++ b/buildroot-external/apparmor/hassio-supervisor
@@ -61,9 +61,9 @@ profile hassio-supervisor flags=(attach_disconnected,mediate_deleted) {
     deny /data/homeassistant rw,
     deny /data/ssl rw,
 
-    /lib/* mr,
     /** r,
-    /data/addons/** rw,
+    /lib/* mr,
+    /data/addons/** lrw,
 
     capability dac_override
   }