diff --git a/apparmor.d/profiles-s-z/zsysd b/apparmor.d/profiles-s-z/zsysd
index 4d5b7b61..8862b59c 100644
--- a/apparmor.d/profiles-s-z/zsysd
+++ b/apparmor.d/profiles-s-z/zsysd
@@ -19,7 +19,10 @@ profile zsysd @{exec_path} flags=(complain) {
        interface=org.freedesktop.PolicyKit1.Authority
        member=CheckAuthorization,
 
-  @{exec_path} rmix,
+  @{exec_path}                   rmix,
+  /{usr/,}{local/,}{s,}bin/zfs   rPx,
+  /{usr/,}{local/,}{s,}bin/zpool rPx,
+  /{usr/,}{s,}bin/update-grub    rPUx,
 
   /etc/hostid r,
   /etc/zsys.conf r,