diff --git a/apparmor.d/profiles-s-z/sbctl b/apparmor.d/profiles-s-z/sbctl
index 57d8fb5e..db71eb7e 100644
--- a/apparmor.d/profiles-s-z/sbctl
+++ b/apparmor.d/profiles-s-z/sbctl
@@ -18,6 +18,7 @@ profile sbctl @{exec_path} {
   @{bin}/lsblk  rPx,
 
   /usr/share/secureboot/{,**} rw,
+  /var/lib/sbctl/{,**} rw,
 
   /{boot,efi}/{,**} r,
   /{boot,efi}/EFI/{,**} rw,