diff --git a/haproxy.changes b/haproxy.changes
index 0947b67..8b38346 100644
--- a/haproxy.changes
+++ b/haproxy.changes
@@ -1,3 +1,9 @@
+-------------------------------------------------------------------
+Thu Nov  5 18:56:00 UTC 2020 - Marcus Rueckert <mrueckert@suse.de>
+
+- apparmor: do not limit to tcp sockets. haproxy can do udp as
+  well.
+
 -------------------------------------------------------------------
 Thu Nov 05 16:43:01 UTC 2020 - mrueckert@suse.de
 
diff --git a/usr.sbin.haproxy.apparmor b/usr.sbin.haproxy.apparmor
index c0ecb09..1bb1820 100644
--- a/usr.sbin.haproxy.apparmor
+++ b/usr.sbin.haproxy.apparmor
@@ -19,8 +19,8 @@ profile haproxy /usr/sbin/haproxy {
   capability fowner,
   capability fsetid,
 
-  network inet  tcp,
-  network inet6 tcp,
+  network inet,
+  network inet6,
 
   /etc/haproxy/* r,