diff --git a/apparmor.d/profiles-g-l/lynx b/apparmor.d/profiles-g-l/lynx
index a9b3691d..2c205f73 100644
--- a/apparmor.d/profiles-g-l/lynx
+++ b/apparmor.d/profiles-g-l/lynx
@@ -13,6 +13,8 @@ profile lynx @{exec_path} {
   include <abstractions/nameservice-strict>
   include <abstractions/wutmp>
   include <abstractions/ssl_certs>
+  include <abstractions/user-download-strict>
+  include <abstractions/user-read-strict>
 
   network inet dgram,
   network inet6 dgram,
@@ -20,20 +22,19 @@ profile lynx @{exec_path} {
   network inet6 stream,
 
   @{exec_path} mr,
-
-  /etc/lynx/{,*} r,
-
+  @{sh_path}        rix,
+  
+  /usr/share/terminfo/{,**} r,
   /usr/share/doc/lynx-common/** r,
 
-  /etc/mime.types r,
-
-  @{sh_path}        rix,
+  /etc/lynx.cfg r,
+  /etc/lynx.lss r,
+  /etc/lynx/{,**} r,
   /etc/mailcap r,
+  /etc/mime.types r,
 
   owner @{tmp}/lynxXXXX*/ rw,
   owner @{tmp}/lynxXXXX*/*TMP.html{,.gz} rw,
 
-  owner @{HOME}/ r,
-
   include if exists <local/lynx>
 }