diff --git a/apparmor.d/groups/virt/containerd b/apparmor.d/groups/virt/containerd
index cb470771..db5899a6 100644
--- a/apparmor.d/groups/virt/containerd
+++ b/apparmor.d/groups/virt/containerd
@@ -98,7 +98,5 @@ profile containerd @{exec_path} flags=(attach_disconnected) {
   /dev/snd/by-path/    r,
   /dev/vfio/           r,
 
-  deny / r,
-
   include if exists <local/containerd>
 }