Index: mosquitto-2.0.8/security/mosquitto.apparmor
===================================================================
--- mosquitto-2.0.8.orig/security/mosquitto.apparmor
+++ mosquitto-2.0.8/security/mosquitto.apparmor
@@ -1,4 +1,6 @@
-/usr/sbin/mosquitto {
+#include <tunables/global>
+
+profile mosquitto /usr/sbin/mosquitto {
 	#include <abstractions/base>
 	#include <abstractions/nameservice>
 
@@ -6,6 +8,7 @@
 	/etc/mosquitto/mosquitto.conf r,
 	/etc/mosquitto/ca_certificates/* r,
 	/etc/mosquitto/certs/* r,
+	/etc/mosquitto/conf.d/ r,
 	/etc/mosquitto/conf.d/* r,
 	/var/lib/mosquitto/ r,
 	/var/lib/mosquitto/mosquitto.db rwk,
@@ -25,4 +28,5 @@
 	/lib{,32,64}/libwrap.so*  rm,
 	/etc/hosts.allow r,
 	/etc/hosts.deny r,
+	#include <local/usr.sbin.mosquitto>
 }