diff --git a/profiles/apparmor.d/john b/profiles/apparmor.d/john
new file mode 100644
index 000000000..0eced2f19
--- /dev/null
+++ b/profiles/apparmor.d/john
@@ -0,0 +1,19 @@
+abi <abi/4.0>,
+include <tunables/global>
+
+profile john /usr/sbin/john {
+  include <abstractions/base>
+  include <abstractions/consoles>
+  include <abstractions/nameservice-strict>
+  include <abstractions/private-files-strict>
+  include if exists <local/john>
+
+  /usr/sbin/john mr,
+
+  /** r,
+
+  owner @{HOME}/.john/ rw,
+  owner @{HOME}/.john/*.log rwk,
+  owner @{HOME}/.john/*.pot rwk,
+  owner @{HOME}/.john/*.rec rwk,
+}