--- a/security/mosquitto.apparmor
+++ b/security/mosquitto.apparmor
@@ -1,3 +1,5 @@
+#include <tunables/global>
+
 /usr/sbin/mosquitto {
 	#include <abstractions/base>
 	#include <abstractions/nameservice>
@@ -6,6 +8,7 @@
 	/etc/mosquitto/mosquitto.conf r,
 	/etc/mosquitto/ca_certificates/* r,
 	/etc/mosquitto/certs/* r,
+	/etc/mosquitto/conf.d r,
 	/etc/mosquitto/conf.d/* r,
 	/var/lib/mosquitto/ r,
 	/var/lib/mosquitto/mosquitto.db rwk,
@@ -24,4 +27,5 @@
 	/lib{,32,64}/libwrap.so*  rm,
 	/etc/hosts.allow r,
 	/etc/hosts.deny r,
+	#include <local/usr.sbin.mosquitto>
 }