diff --git a/apparmor.d/profiles-s-z/sudo b/apparmor.d/profiles-s-z/sudo
index 6f01bc8f..9574b98d 100644
--- a/apparmor.d/profiles-s-z/sudo
+++ b/apparmor.d/profiles-s-z/sudo
@@ -48,6 +48,8 @@ profile sudo @{exec_path} flags=(attach_disconnected) {
   @{run}/systemd/sessions/* r,
   @{run}/systemd/sessions/?@{int}.ref rw,
 
+  @{sys}/fs/cgroup/*.slice{,/*.slice}/*.service/cgroup.procs r,
+
   include if exists <local/sudo>
 }