diff --git a/profiles/apparmor/profiles/extras/postfix.tlsmgr b/profiles/apparmor/profiles/extras/postfix.tlsmgr
index 8603f2b3c..cb803d7e9 100644
--- a/profiles/apparmor/profiles/extras/postfix.tlsmgr
+++ b/profiles/apparmor/profiles/extras/postfix.tlsmgr
@@ -19,8 +19,11 @@ profile postfix-tlsmgr /usr/lib/postfix/{sbin/,}tlsmgr {
 
   /usr/lib/postfix/{sbin/,}tlsmgr          rmix,
 
-  /etc/postfix/prng_exch            rw,
-  /{var/spool/postfix/,}private/tlsmgr r,
+  /var/spool/postfix/dev/urandom r,
+  /{etc,var/lib}/postfix/prng_exch            rwk,
+  /{var/spool/postfix/,}private/tlsmgr rw,
   /{,var/}run/__db.smtpd_tls_session_cache.db rw,
   /{,var/}run/smtpd_tls_session_cache.db rw,
+  /var/lib/postfix/smtpd_scache.db rwk,
+  /var/lib/postfix/smtp_scache.db rwk,
 }