diff --git a/profiles/apparmor.d/tunables/global b/profiles/apparmor.d/tunables/global
index 58d087fbe..28d6fc6dc 100644
--- a/profiles/apparmor.d/tunables/global
+++ b/profiles/apparmor.d/tunables/global
@@ -18,3 +18,4 @@
 #include <tunables/alias>
 #include <tunables/kernelvars>
 #include <tunables/xdg-user-dirs>
+#include <tunables/share>
diff --git a/profiles/apparmor.d/tunables/share b/profiles/apparmor.d/tunables/share
new file mode 100644
index 000000000..f41121c8a
--- /dev/null
+++ b/profiles/apparmor.d/tunables/share
@@ -0,0 +1,15 @@
+@{flatpak_exports_root} = {flatpak/exports,flatpak/{app,runtime}/*/*/*/*/export}
+
+# System-wide directories with behaviour analogous to /usr/share
+# in patterns like the freedesktop.org basedir spec. These are
+# owned by root or a system user, appear in XDG_DATA_DIRS, and
+# are the parent directory for `applications`, `themes`,
+# `dbus-1/services`, etc.
+@{system_share_dirs} = /{usr,usr/local,var/lib/@{flatpak_exports_root}}/share
+
+# Per-user/personal directories with behaviour analogous to
+# ~/.local/share in patterns like the freedesktop.org basedir spec.
+# These are owned by the user running an application, appear in
+# XDG_DATA_DIRS or XDG_DATA_HOME, and are the parent directory
+# for the same subdirectories as @{system_share_dirs}
+@{user_share_dirs} = @{HOME}/.local{,/share/@{flatpak_exports_root}}/share