diff --git a/profiles/apparmor.d/unprivileged_userns b/profiles/apparmor.d/unprivileged_userns
index a131c9ce8..8f6e7861b 100644
--- a/profiles/apparmor.d/unprivileged_userns
+++ b/profiles/apparmor.d/unprivileged_userns
@@ -13,7 +13,7 @@ profile unprivileged_userns {
      allow network,
      allow signal,
      allow dbus,
-     allow file rwlkm /**,
+     allow file rwlkm /{,**},
      allow unix,
      allow mqueue,
      allow ptrace,