diff --git a/data/apparmor/usr.bin.redshift.in b/data/apparmor/usr.bin.redshift.in
index dd9d9ae5..9ffebea7 100644
--- a/data/apparmor/usr.bin.redshift.in
+++ b/data/apparmor/usr.bin.redshift.in
@@ -36,6 +36,11 @@
   audit dbus bus=system,
 
   owner @{HOME}/.config/redshift/redshift.conf r,
+  # Legacy config path
+  owner @{HOME}/.config/redshift.conf r,
+
+  # Required by getpwuid() call in config-ini.c.
+  /etc/passwd* r,
 
   # Site-specific additions and overrides. See local/README for details.
   #include <local/usr.bin.redshift>