diff --git a/apparmor.d/groups/virt/containerd b/apparmor.d/groups/virt/containerd
index 3ecacd9d..99b9f738 100644
--- a/apparmor.d/groups/virt/containerd
+++ b/apparmor.d/groups/virt/containerd
@@ -62,7 +62,7 @@ profile containerd @{exec_path} flags=(attach_disconnected) {
   /var/lib/cni/{,**/} w,
   /var/lib/cni/results/cni-loopback-@{uuid}-lo wl,
   /var/lib/cni/results/cni-loopback-[0-9a-z]*-lo wl,
-  /var/lib/cni/results/k8s-pod-network-[0-9a-z]*-eth0,
+  /var/lib/cni/results/k8s-pod-network-[0-9a-z]*-eth0 wl,
   /var/lib/containerd/{,**} rwk,
   /var/lib/containerd/tmpmounts/containerd-mount[0-9]*/** l,
   /var/lib/docker/containerd/{,**} rwk,