diff --git a/apparmor-usr.sbin.hostapd b/apparmor-usr.sbin.hostapd
index 6da973e..8cdb9b1 100644
--- a/apparmor-usr.sbin.hostapd
+++ b/apparmor-usr.sbin.hostapd
@@ -20,7 +20,9 @@ profile hostapd /usr/sbin/hostapd {
 
   /etc/libnl/classid r,
 
-  #/proc/*/net/psched r,
+  @{PROC}/sys/net/ipv*/conf/*/arp_accept w,
+  /sys/devices/platform/**/net/**/proxyarp_wifi w,
+  /sys/devices/platform/**/net/**/hairpin_mode w,
 
   # grant access to RFKILL control device
   /dev/rfkill rw,
diff --git a/hostapd.changes b/hostapd.changes
index bf5c17e..67ec96f 100644
--- a/hostapd.changes
+++ b/hostapd.changes
@@ -1,3 +1,8 @@
+-------------------------------------------------------------------
+Wed Jul 14 08:41:42 UTC 2021 - Michael Ströder <michael@stroeder.com>
+
+- fixed AppArmor profile
+
 -------------------------------------------------------------------
 Tue Apr  6 14:51:18 UTC 2021 - Clemens Famulla-Conrad <cfamullaconrad@suse.com>
 
diff --git a/hostapd.spec b/hostapd.spec
index e338aa6..7584772 100644
--- a/hostapd.spec
+++ b/hostapd.spec
@@ -21,7 +21,7 @@ Name:           hostapd
 Version:        2.9
 Release:        0
 Summary:        Daemon for running a WPA capable Access Point
-License:        GPL-2.0-only OR BSD-3-Clause
+License:        BSD-3-Clause OR GPL-2.0-only
 Group:          Hardware/Wifi
 URL:            https://w1.fi/
 Source:         https://w1.fi/releases/hostapd-%{version}.tar.gz