diff --git a/libraries/libapparmor/testsuite/test_multi/change_onexec_lp1648143.profile b/libraries/libapparmor/testsuite/test_multi/change_onexec_lp1648143.profile
index 7848bac5e..a65eeda1e 100644
--- a/libraries/libapparmor/testsuite/test_multi/change_onexec_lp1648143.profile
+++ b/libraries/libapparmor/testsuite/test_multi/change_onexec_lp1648143.profile
@@ -1,2 +1,4 @@
 profile unconfined {
+  change_profile -> system_tor,
+
 }
diff --git a/utils/apparmor/logparser.py b/utils/apparmor/logparser.py
index e3cfc2eea..6a6f3634b 100644
--- a/utils/apparmor/logparser.py
+++ b/utils/apparmor/logparser.py
@@ -362,7 +362,7 @@ class ReadLog:
             self.hashlog[aamode][full_profile]['change_hat'][e['name2']] = True
             return
 
-        elif e['operation'] == 'change_profile':
+        elif e['operation'] == 'change_profile' or e['operation'] == 'change_onexec':
             ChangeProfileRule.hashlog_from_event(self.hashlog[aamode][full_profile]['change_profile'], e)
             return
 
diff --git a/utils/test/test-libapparmor-test_multi.py b/utils/test/test-libapparmor-test_multi.py
index ff41ebcfd..6e72dbb13 100644
--- a/utils/test/test-libapparmor-test_multi.py
+++ b/utils/test/test-libapparmor-test_multi.py
@@ -166,7 +166,6 @@ log_to_profile_skip = [
 
 # tests that cause an empty log
 log_to_profile_known_empty_log = [
-    'change_onexec_lp1648143',  # change_onexec not supported in logparser.py yet (and the log is about "no new privs" error)
     'ptrace_garbage_lp1689667_1',  # no denied= in log
     'ptrace_no_denied_mask',  # no denied= in log
     'unconfined-change_hat',  # unconfined trying to change_hat, which isn't allowed