diff --git a/apparmor.d/abstractions/app-launcher-user b/apparmor.d/abstractions/app-launcher-user
index 5e7c5082..edf96b05 100644
--- a/apparmor.d/abstractions/app-launcher-user
+++ b/apparmor.d/abstractions/app-launcher-user
@@ -21,6 +21,9 @@
   /usr/                         r,
   /usr/local/bin/               r,
 
+  @{user_bin_dirs}/             r,
+  @{user_bin_dirs}/**         PUx,
+
   include if exists <abstractions/app-launcher-user.d>
 
 # vim:syntax=apparmor
diff --git a/apparmor.d/groups/kde/ksmserver b/apparmor.d/groups/kde/ksmserver
index edfc3ade..5f6c9ceb 100644
--- a/apparmor.d/groups/kde/ksmserver
+++ b/apparmor.d/groups/kde/ksmserver
@@ -31,8 +31,6 @@ profile ksmserver @{exec_path} flags=(attach_disconnected,mediate_deleted) {
   #aa:exec drkonqi
   #aa:exec kscreenlocker_greet
 
-  @{user_bin_dirs}/** rPUx,
-
   /usr/share/color-schemes/{,**} r,
   /usr/share/knotifications{5,6}/*.notifyrc r,
   /usr/share/kservices{5,6}/{,**} r,
diff --git a/apparmor.d/profiles-s-z/waybar b/apparmor.d/profiles-s-z/waybar
index e6cd6158..250a6a73 100644
--- a/apparmor.d/profiles-s-z/waybar
+++ b/apparmor.d/profiles-s-z/waybar
@@ -10,7 +10,6 @@ include <tunables/global>
 profile waybar @{exec_path} flags=(attach_disconnected) {
   include <abstractions/base>
   include <abstractions/audio-client>
-  include <abstractions/app-launcher-user>
   include <abstractions/dconf-write>
   include <abstractions/desktop>
   include <abstractions/nameservice-strict>