diff --git a/profiles/apparmor.d/tnftp b/profiles/apparmor.d/tnftp
index addab038f..73a938de2 100644
--- a/profiles/apparmor.d/tnftp
+++ b/profiles/apparmor.d/tnftp
@@ -64,7 +64,7 @@ profile tnftp /usr/bin/tnftp {
   # here we are restricting execution to files in a limited set of
   # directories, for which we also deny write access.
   file Cx @{tnftp_rx}/* -> cmds,
-  deny file w @{tnftp_rx}/*,
+  audit deny file w @{tnftp_rx}/*,
   
   profile cmds {
     include <abstractions/base>
@@ -77,7 +77,7 @@ profile tnftp /usr/bin/tnftp {
     deny network,
 
     file ixmr @{tnftp_rx}/*,
-    deny file w @{tnftp_rx}/*,
+    audit deny file w @{tnftp_rx}/*,
 
     # allow read on anything on @{HOME} not explicitly denied
     owner file r @{HOME},