diff --git a/apparmor.d/groups/children/child-open b/apparmor.d/groups/children/child-open
index 2fc7ca7d..874c771d 100644
--- a/apparmor.d/groups/children/child-open
+++ b/apparmor.d/groups/children/child-open
@@ -19,6 +19,9 @@ include <tunables/global>
 # App allowed to open
 profile child-open {
   include <abstractions/base>
+  include <abstractions/dri-enumerate>
+  include <abstractions/mesa>
+  include <abstractions/vulkan>
   include <abstractions/xdg-open>
 
   @{bin}/exo-open                                     mr,
@@ -73,6 +76,7 @@ profile child-open {
   @{bin}/gnome-calculator rPUx,
   @{bin}/gnome-disk-image-mounter rPx,
   @{bin}/gnome-disks       rPx,
+  @{bin}/gwenview          rPUx,
   @{bin}/kgx               rPx,
   @{bin}/okular            rPx,
   @{bin}/qbittorrent       rPx,
@@ -86,6 +90,11 @@ profile child-open {
   @{bin}/viewnior         rPUx,
   @{bin}/vlc               rPx,
   @{bin}/xarchiver         rPx,
+  @{lib}/libreoffice/program/{soffice,soffice.bin,oosplash} rPUx,
+
+  owner @{user_config_dirs}/menus/{,**} r,
+
+  owner @{run}/user/@{uid}/kioclient*.[0-9]*.kioworker.socket rwl -> @{run}/user/@{uid}/#[0-9]*[0-9],
 
   include if exists <usr/child-open.d>
   include if exists <local/child-open>