diff --git a/apparmor.d/groups/gnome/gdm-session-worker b/apparmor.d/groups/gnome/gdm-session-worker
index 92744652..f50e3031 100644
--- a/apparmor.d/groups/gnome/gdm-session-worker
+++ b/apparmor.d/groups/gnome/gdm-session-worker
@@ -99,9 +99,11 @@ profile gdm-session-worker @{exec_path} flags=(attach_disconnected) {
   owner /.fscrypt/protectors/@{hex16} r,
 
         /home/ r,
+        /home/.fscrypt/policies/ r,
+  owner /home/.fscrypt/policies/@{hex32} r,
+  owner /home/.fscrypt/protectors/@{hex16}.link r,
+
   owner @{HOME}/.pam_environment r,
-  owner @{HOME}/policies/@{hex32} r,
-  owner @{HOME}/protectors/@{hex16}.link r,
 
         @{run}/cockpit/inactive.motd r,
   owner @{run}/systemd/seats/seat@{int} r,