diff --git a/addons_updater/apparmor.txt b/addons_updater/apparmor.txt
index 7d7a544e01..99e33321e6 100644
--- a/addons_updater/apparmor.txt
+++ b/addons_updater/apparmor.txt
@@ -2,6 +2,7 @@
 
 profile addon_updater flags=(attach_disconnected,mediate_deleted) {
   #include <abstractions/base>
+  capability sys_chroot,
 
   # Capabilities
   file,
diff --git a/arpspoof/apparmor.txt b/arpspoof/apparmor.txt
index b26a7dcf64..0b6267ec40 100644
--- a/arpspoof/apparmor.txt
+++ b/arpspoof/apparmor.txt
@@ -9,6 +9,7 @@ profile arpspoof_addon flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
+  capability sys_chroot,
   capability sys_admin,
   file,
   signal,
diff --git a/aurral/apparmor.txt b/aurral/apparmor.txt
index 0e967b8947..812b7db5b3 100644
--- a/aurral/apparmor.txt
+++ b/aurral/apparmor.txt
@@ -2,6 +2,7 @@
 
 profile aurral flags=(attach_disconnected,mediate_deleted) {
   #include <abstractions/base>
+  capability sys_chroot,
 
   file,
   signal (send) set=(kill,term,int,hup,cont),
diff --git a/autobrr/apparmor.txt b/autobrr/apparmor.txt
index fc964885f1..ffb9181699 100644
--- a/autobrr/apparmor.txt
+++ b/autobrr/apparmor.txt
@@ -9,6 +9,7 @@ profile autobrr_addon flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
+  capability sys_chroot,
   capability sys_admin,
   file,
   signal,
diff --git a/baikal/apparmor.txt b/baikal/apparmor.txt
index d79b8b5d34..88a6af1533 100644
--- a/baikal/apparmor.txt
+++ b/baikal/apparmor.txt
@@ -9,6 +9,7 @@ profile baikal_addon flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
+  capability sys_chroot,
   file,
   signal,
   mount,
diff --git a/battybirdnet-pi/apparmor.txt b/battybirdnet-pi/apparmor.txt
index 3177c146be..399dfe11de 100644
--- a/battybirdnet-pi/apparmor.txt
+++ b/battybirdnet-pi/apparmor.txt
@@ -9,6 +9,7 @@ profile battybirdnet-pi_addon flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
+  capability sys_chroot,
   capability sys_admin,
   file,
   signal,
diff --git a/bazarr/apparmor.txt b/bazarr/apparmor.txt
index fdf3c51e62..5a88856636 100644
--- a/bazarr/apparmor.txt
+++ b/bazarr/apparmor.txt
@@ -10,6 +10,7 @@ profile bazarr_addon flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
+  capability sys_chroot,
   capability sys_admin,
   file,
   signal,
diff --git a/bentopdf/apparmor.txt b/bentopdf/apparmor.txt
index 9d0b322f62..544de563e0 100644
--- a/bentopdf/apparmor.txt
+++ b/bentopdf/apparmor.txt
@@ -2,6 +2,7 @@
 
 profile bentopdf flags=(attach_disconnected,mediate_deleted) {
   #include <abstractions/base>
+  capability sys_chroot,
 
   # Capabilities
   file,
diff --git a/binance-trading-bot/apparmor.txt b/binance-trading-bot/apparmor.txt
index eed8e03ab6..1c64329884 100644
--- a/binance-trading-bot/apparmor.txt
+++ b/binance-trading-bot/apparmor.txt
@@ -9,6 +9,7 @@ profile db21ed7f_binance-trading-bot flags=(attach_disconnected,mediate_deleted)
   capability fowner,
   capability setgid,
   capability setuid,
+  capability sys_chroot,
   capability sys_admin,
   file,
   signal,
diff --git a/birdnet-go/apparmor.txt b/birdnet-go/apparmor.txt
index 64c538a8f3..f58f29087a 100644
--- a/birdnet-go/apparmor.txt
+++ b/birdnet-go/apparmor.txt
@@ -9,6 +9,7 @@ profile db21ed7f_birdnet-go flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
+  capability sys_chroot,
   capability sys_admin,
   capability sys_resource,
   file,
diff --git a/birdnet-pi/apparmor.txt b/birdnet-pi/apparmor.txt
index dfcc30fa6d..6f6ecd07dc 100644
--- a/birdnet-pi/apparmor.txt
+++ b/birdnet-pi/apparmor.txt
@@ -9,6 +9,7 @@ profile birdnet-pi_addon flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
+  capability sys_chroot,
   capability sys_admin,
   file,
   signal,
diff --git a/birdnet-pipy/apparmor.txt b/birdnet-pipy/apparmor.txt
index 6827db08ac..89574f71a4 100644
--- a/birdnet-pipy/apparmor.txt
+++ b/birdnet-pipy/apparmor.txt
@@ -8,6 +8,7 @@ profile birdnet-pipy_addon flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
+  capability sys_chroot,
   file,
   signal,
   mount,
diff --git a/bitwarden/apparmor.txt b/bitwarden/apparmor.txt
index 9495ac4406..7a29ac4b4d 100644
--- a/bitwarden/apparmor.txt
+++ b/bitwarden/apparmor.txt
@@ -8,6 +8,7 @@ profile bitwarden_addon flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
+  capability sys_chroot,
   file,
   signal,
   mount,
diff --git a/booksonic_air/apparmor.txt b/booksonic_air/apparmor.txt
index 35d9525695..0fbf92c86c 100644
--- a/booksonic_air/apparmor.txt
+++ b/booksonic_air/apparmor.txt
@@ -9,6 +9,7 @@ profile booksonic-air_addon flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
+  capability sys_chroot,
   capability sys_admin,
   file,
   signal,
diff --git a/browser_brave/apparmor.txt b/browser_brave/apparmor.txt
deleted file mode 120000
index 6513b47edb..0000000000
--- a/browser_brave/apparmor.txt
+++ /dev/null
@@ -1 +0,0 @@
-../browser_chromium/apparmor.txt
\ No newline at end of file
diff --git a/browser_brave/apparmor.txt b/browser_brave/apparmor.txt
new file mode 100644
index 0000000000..8c1593483e
--- /dev/null
+++ b/browser_brave/apparmor.txt
@@ -0,0 +1,72 @@
+#include <tunables/global>
+
+profile browser_brave_addon flags=(attach_disconnected,mediate_deleted) {
+  #include <abstractions/base>
+
+  capability chown,
+  capability dac_override,
+  capability dac_read_search,
+  capability fowner,
+  capability setgid,
+  capability setuid,
+  capability sys_chroot,
+  capability sys_admin,
+  file,
+  signal,
+  mount,
+  umount,
+  remount,
+  network udp,
+  network tcp,
+  network dgram,
+  network stream,
+  network inet,
+  network inet6,
+  network netlink raw,
+  network unix dgram,
+
+
+# S6-Overlay
+  /init ix,
+  /run/{s6,s6-rc*,service}/** ix,
+  /package/** ix,
+  /command/** ix,
+  /run/{,**} rwk,
+  /dev/tty rw,
+  /bin/** ix,
+  /usr/bin/** ix,
+  /usr/lib/bashio/** ix,
+  /etc/s6/** rix,
+  /run/s6/** rix,
+  /etc/services.d/** rwix,
+  /etc/cont-init.d/** rwix,
+  /etc/cont-finish.d/** rwix,
+  /init rix,
+  /var/run/** mrwkl,
+  /var/run/ mrwkl,
+  /dev/i2c-1 mrwkl,
+  # Files required
+  /dev/fuse mrwkl,
+  /dev/sda1 mrwkl,
+  /dev/sdb1 mrwkl,
+  /dev/nvme0 mrwkl,
+  /dev/nvme0n1 mrwkl,
+  /dev/nvme1 mrwkl,
+  /dev/mmcblk0p1 mrwkl,
+  /dev/* mrwkl,
+  /udev/* mrwkl,
+  /tmp/** mrkwl,
+  /dev/fuse/** mrkwl,
+  /dev/** mrkwl,
+  /sys/firmware/** mrkwl,
+
+  # Data access
+  /data/** rw,
+
+  # suppress ptrace denials when using 'docker ps' or using 'ps' inside a container
+  ptrace (trace,read) peer=docker-default,
+
+  # docker daemon confinement requires explict allow rule for signal
+  signal (receive) set=(kill,term) peer=/usr/bin/docker,
+
+}
diff --git a/browser_chromium/apparmor.txt b/browser_chromium/apparmor.txt
index ca8bb381e6..863320a100 100644
--- a/browser_chromium/apparmor.txt
+++ b/browser_chromium/apparmor.txt
@@ -1,6 +1,6 @@
 #include <tunables/global>
 
-profile chromium_addon flags=(attach_disconnected,mediate_deleted) {
+profile browser_chromium_addon flags=(attach_disconnected,mediate_deleted) {
   #include <abstractions/base>
 
   capability chown,
@@ -9,6 +9,7 @@ profile chromium_addon flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
+  capability sys_chroot,
   capability sys_admin,
   file,
   signal,
diff --git a/browserless_chrome/apparmor.txt b/browserless_chrome/apparmor.txt
index 13e198c94e..e44deb8fda 100644
--- a/browserless_chrome/apparmor.txt
+++ b/browserless_chrome/apparmor.txt
@@ -9,6 +9,7 @@ profile browserlesschrome_addon flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
+  capability sys_chroot,
   file,
   signal,
   mount,
diff --git a/calibre/apparmor.txt b/calibre/apparmor.txt
index 948d3bed34..29d36acc51 100644
--- a/calibre/apparmor.txt
+++ b/calibre/apparmor.txt
@@ -10,6 +10,7 @@ profile calibre_addon flags=(attach_disconnected,mediate_deleted) {
   capability net_admin,
   capability setgid,
   capability setuid,
+  capability sys_chroot,
   capability sys_admin,
   file,
   signal,
diff --git a/calibre_web/apparmor.txt b/calibre_web/apparmor.txt
index 0675063e4b..a3376fb237 100644
--- a/calibre_web/apparmor.txt
+++ b/calibre_web/apparmor.txt
@@ -10,6 +10,7 @@ profile calibre-web_addon flags=(attach_disconnected,mediate_deleted) {
   capability net_admin,
   capability setgid,
   capability setuid,
+  capability sys_chroot,
   capability sys_admin,
   file,
   signal,
diff --git a/changedetection.io/apparmor.txt b/changedetection.io/apparmor.txt
index 70852dde51..0f76b3524a 100644
--- a/changedetection.io/apparmor.txt
+++ b/changedetection.io/apparmor.txt
@@ -8,6 +8,7 @@ profile addon_db21ed7f_changedetection.io_nas flags=(attach_disconnected,mediate
   capability fowner,
   capability setgid,
   capability setuid,
+  capability sys_chroot,
   file,
   signal,
   mount,
diff --git a/cleanuparr/apparmor.txt b/cleanuparr/apparmor.txt
index 8010415bd1..f438d6c4ce 100644
--- a/cleanuparr/apparmor.txt
+++ b/cleanuparr/apparmor.txt
@@ -8,6 +8,7 @@ profile cleanuparr_addon flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
+  capability sys_chroot,
   file,
   signal,
   mount,
diff --git a/cloudcommander/apparmor.txt b/cloudcommander/apparmor.txt
index 999db6613d..31c32b4098 100644
--- a/cloudcommander/apparmor.txt
+++ b/cloudcommander/apparmor.txt
@@ -9,6 +9,7 @@ profile cloudcommander_addon flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
+  capability sys_chroot,
   capability sys_admin,
   file,
   signal,
diff --git a/codex/apparmor.txt b/codex/apparmor.txt
index 625bcb4207..4fb7fcf603 100644
--- a/codex/apparmor.txt
+++ b/codex/apparmor.txt
@@ -9,6 +9,7 @@ profile db21ed7f_codex flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
+  capability sys_chroot,
   capability sys_admin,
   file,
   signal,
diff --git a/collabora/apparmor.txt b/collabora/apparmor.txt
index 2dd21cfedd..b1c6725d6c 100644
--- a/collabora/apparmor.txt
+++ b/collabora/apparmor.txt
@@ -8,6 +8,7 @@ profile collabora_addon flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
+  capability sys_chroot,
   file,
   signal,
   mount,
diff --git a/comixed/apparmor.txt b/comixed/apparmor.txt
index e4d6231179..7630aa06bd 100644
--- a/comixed/apparmor.txt
+++ b/comixed/apparmor.txt
@@ -1,6 +1,6 @@
 #include <tunables/global>
 
-profile db21ed7f_qbittorrent flags=(attach_disconnected,mediate_deleted) {
+profile comixed_addon flags=(attach_disconnected,mediate_deleted) {
   #include <abstractions/base>
 
   capability chown,
@@ -9,6 +9,7 @@ profile db21ed7f_qbittorrent flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
+  capability sys_chroot,
   capability sys_admin,
   file,
   signal,
diff --git a/emby/apparmor.txt b/emby/apparmor.txt
index 08bdf4294d..db5fa6bfc0 100644
--- a/emby/apparmor.txt
+++ b/emby/apparmor.txt
@@ -9,6 +9,7 @@ profile addon_db21ed7f_emby_nas flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
+  capability sys_chroot,
   capability sys_admin,
   file,
   signal,
diff --git a/emby_beta/apparmor.txt b/emby_beta/apparmor.txt
index 08bdf4294d..9ca416c8d1 100644
--- a/emby_beta/apparmor.txt
+++ b/emby_beta/apparmor.txt
@@ -1,6 +1,6 @@
 #include <tunables/global>
 
-profile addon_db21ed7f_emby_nas flags=(attach_disconnected,mediate_deleted) {
+profile emby_beta_addon flags=(attach_disconnected,mediate_deleted) {
   #include <abstractions/base>
 
   capability chown,
@@ -9,6 +9,7 @@ profile addon_db21ed7f_emby_nas flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
+  capability sys_chroot,
   capability sys_admin,
   file,
   signal,
diff --git a/enedisgateway2mqtt/apparmor.txt b/enedisgateway2mqtt/apparmor.txt
index 58f98f9c39..44a83939a8 100644
--- a/enedisgateway2mqtt/apparmor.txt
+++ b/enedisgateway2mqtt/apparmor.txt
@@ -1,6 +1,6 @@
 #include <tunables/global>
 
-profile inadyn_addon flags=(attach_disconnected,mediate_deleted) {
+profile enedisgateway2mqtt_addon flags=(attach_disconnected,mediate_deleted) {
   #include <abstractions/base>
 
   capability chown,
@@ -8,6 +8,7 @@ profile inadyn_addon flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
+  capability sys_chroot,
   file,
   signal,
   mount,
diff --git a/enedisgateway2mqtt_dev/apparmor.txt b/enedisgateway2mqtt_dev/apparmor.txt
index 06379cc7a9..a23ed57b8c 100644
--- a/enedisgateway2mqtt_dev/apparmor.txt
+++ b/enedisgateway2mqtt_dev/apparmor.txt
@@ -1,6 +1,6 @@
 #include <tunables/global>
 
-profile inadyn_addon flags=(attach_disconnected,mediate_deleted) {
+profile enedisgateway2mqtt_dev_addon flags=(attach_disconnected,mediate_deleted) {
   #include <abstractions/base>
 
   capability chown,
@@ -8,6 +8,7 @@ profile inadyn_addon flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
+  capability sys_chroot,
   file,
   signal,
   mount,
diff --git a/ente/apparmor.txt b/ente/apparmor.txt
index 883b69a2c8..d2b885d4e2 100644
--- a/ente/apparmor.txt
+++ b/ente/apparmor.txt
@@ -9,6 +9,7 @@ profile ente_addon flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
+  capability sys_chroot,
   capability sys_admin,
   file,
   signal,
diff --git a/epicgamesfree/apparmor.txt b/epicgamesfree/apparmor.txt
index b5de86355e..ac75df29f9 100644
--- a/epicgamesfree/apparmor.txt
+++ b/epicgamesfree/apparmor.txt
@@ -8,6 +8,7 @@ profile epicgamesfree_addon flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
+  capability sys_chroot,
   file,
   signal,
   mount,
diff --git a/filebrowser/apparmor.txt b/filebrowser/apparmor.txt
index e4d6231179..d4b4f55aa0 100644
--- a/filebrowser/apparmor.txt
+++ b/filebrowser/apparmor.txt
@@ -1,6 +1,6 @@
 #include <tunables/global>
 
-profile db21ed7f_qbittorrent flags=(attach_disconnected,mediate_deleted) {
+profile filebrowser_addon flags=(attach_disconnected,mediate_deleted) {
   #include <abstractions/base>
 
   capability chown,
@@ -9,6 +9,7 @@ profile db21ed7f_qbittorrent flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
+  capability sys_chroot,
   capability sys_admin,
   file,
   signal,
diff --git a/filebrowser_quantum/apparmor.txt b/filebrowser_quantum/apparmor.txt
index e4d6231179..cbf69fb94a 100644
--- a/filebrowser_quantum/apparmor.txt
+++ b/filebrowser_quantum/apparmor.txt
@@ -1,6 +1,6 @@
 #include <tunables/global>
 
-profile db21ed7f_qbittorrent flags=(attach_disconnected,mediate_deleted) {
+profile filebrowser_quantum_addon flags=(attach_disconnected,mediate_deleted) {
   #include <abstractions/base>
 
   capability chown,
@@ -9,6 +9,7 @@ profile db21ed7f_qbittorrent flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
+  capability sys_chroot,
   capability sys_admin,
   file,
   signal,
diff --git a/fireflyiii/apparmor.txt b/fireflyiii/apparmor.txt
index 00c1c466ff..41c85ddce9 100644
--- a/fireflyiii/apparmor.txt
+++ b/fireflyiii/apparmor.txt
@@ -8,6 +8,7 @@ profile fireflyiii_addon flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
+  capability sys_chroot,
   file,
   signal,
   mount,
diff --git a/fireflyiii_data_importer/apparmor.txt b/fireflyiii_data_importer/apparmor.txt
index 00c1c466ff..871c34e3a2 100644
--- a/fireflyiii_data_importer/apparmor.txt
+++ b/fireflyiii_data_importer/apparmor.txt
@@ -1,6 +1,6 @@
 #include <tunables/global>
 
-profile fireflyiii_addon flags=(attach_disconnected,mediate_deleted) {
+profile fireflyiii_data_importer_addon flags=(attach_disconnected,mediate_deleted) {
   #include <abstractions/base>
 
   capability chown,
@@ -8,6 +8,7 @@ profile fireflyiii_addon flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
+  capability sys_chroot,
   file,
   signal,
   mount,
diff --git a/fireflyiii_fints_importer/apparmor.txt b/fireflyiii_fints_importer/apparmor.txt
index 978728d368..c019cbb714 100644
--- a/fireflyiii_fints_importer/apparmor.txt
+++ b/fireflyiii_fints_importer/apparmor.txt
@@ -8,6 +8,7 @@ profile fireflyiii_fints_addon flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
+  capability sys_chroot,
   file,
   signal,
   mount,
diff --git a/flaresolverr/apparmor.txt b/flaresolverr/apparmor.txt
index 22c2735419..53f543eda9 100644
--- a/flaresolverr/apparmor.txt
+++ b/flaresolverr/apparmor.txt
@@ -1,6 +1,6 @@
 #include <tunables/global>
 
-profile joplin flags=(attach_disconnected,mediate_deleted) {
+profile flaresolverr_addon flags=(attach_disconnected,mediate_deleted) {
   #include <abstractions/base>
 
   capability chown,
@@ -8,6 +8,7 @@ profile joplin flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
+  capability sys_chroot,
   file,
   signal,
   mount,
diff --git a/flexget/apparmor.txt b/flexget/apparmor.txt
index 5a2add0762..2c53003395 100644
--- a/flexget/apparmor.txt
+++ b/flexget/apparmor.txt
@@ -8,6 +8,7 @@ profile flexget_addon flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
+  capability sys_chroot,
   file,
   signal,
   mount,
diff --git a/free_games_claimer/apparmor.txt b/free_games_claimer/apparmor.txt
index 558dab15f7..f943ef2a4d 100644
--- a/free_games_claimer/apparmor.txt
+++ b/free_games_claimer/apparmor.txt
@@ -8,6 +8,7 @@ profile free_games_claimer_addon flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
+  capability sys_chroot,
   file,
   signal,
   mount,
diff --git a/gazpar2mqtt/apparmor.txt b/gazpar2mqtt/apparmor.txt
index 06379cc7a9..f23467aa31 100644
--- a/gazpar2mqtt/apparmor.txt
+++ b/gazpar2mqtt/apparmor.txt
@@ -1,6 +1,6 @@
 #include <tunables/global>
 
-profile inadyn_addon flags=(attach_disconnected,mediate_deleted) {
+profile gazpar2mqtt_addon flags=(attach_disconnected,mediate_deleted) {
   #include <abstractions/base>
 
   capability chown,
@@ -8,6 +8,7 @@ profile inadyn_addon flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
+  capability sys_chroot,
   file,
   signal,
   mount,
diff --git a/grampsweb/apparmor.txt b/grampsweb/apparmor.txt
index b96d415dea..9163de6438 100644
--- a/grampsweb/apparmor.txt
+++ b/grampsweb/apparmor.txt
@@ -8,6 +8,7 @@ profile grampsweb_addon flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
+  capability sys_chroot,
   file,
   signal,
   mount,
diff --git a/grav/apparmor.txt b/grav/apparmor.txt
index 251fa2cb70..0a5655e612 100644
--- a/grav/apparmor.txt
+++ b/grav/apparmor.txt
@@ -8,6 +8,7 @@ profile grav_addon flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
+  capability sys_chroot,
   file,
   signal,
   mount,
diff --git a/guacamole/apparmor.txt b/guacamole/apparmor.txt
index 963a2b3a52..c724585d0b 100644
--- a/guacamole/apparmor.txt
+++ b/guacamole/apparmor.txt
@@ -8,6 +8,7 @@ profile guacamole_addon flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
+  capability sys_chroot,
   file,
   signal,
   mount,
diff --git a/immich/apparmor.txt b/immich/apparmor.txt
index e4d6231179..672a974983 100644
--- a/immich/apparmor.txt
+++ b/immich/apparmor.txt
@@ -1,6 +1,6 @@
 #include <tunables/global>
 
-profile db21ed7f_qbittorrent flags=(attach_disconnected,mediate_deleted) {
+profile immich_addon flags=(attach_disconnected,mediate_deleted) {
   #include <abstractions/base>
 
   capability chown,
@@ -9,6 +9,7 @@ profile db21ed7f_qbittorrent flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
+  capability sys_chroot,
   capability sys_admin,
   file,
   signal,
diff --git a/immich_frame/apparmor.txt b/immich_frame/apparmor.txt
index 617994e6ee..f21cce1c5d 100644
--- a/immich_frame/apparmor.txt
+++ b/immich_frame/apparmor.txt
@@ -8,6 +8,7 @@ profile db21ed7f_immich_frame flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
+  capability sys_chroot,
   file,
   signal,
   mount,
diff --git a/immich_power_tools/apparmor.txt b/immich_power_tools/apparmor.txt
index 222f74d15c..2184a668b0 100644
--- a/immich_power_tools/apparmor.txt
+++ b/immich_power_tools/apparmor.txt
@@ -8,6 +8,7 @@ profile db21ed7f_immich_power_tools flags=(attach_disconnected,mediate_deleted)
   capability fowner,
   capability setgid,
   capability setuid,
+  capability sys_chroot,
   file,
   signal,
   mount,
diff --git a/inadyn/apparmor.txt b/inadyn/apparmor.txt
index 06379cc7a9..dbfbf14630 100644
--- a/inadyn/apparmor.txt
+++ b/inadyn/apparmor.txt
@@ -8,6 +8,7 @@ profile inadyn_addon flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
+  capability sys_chroot,
   file,
   signal,
   mount,
diff --git a/jackett/apparmor.txt b/jackett/apparmor.txt
index 992910c816..3651d1872a 100644
--- a/jackett/apparmor.txt
+++ b/jackett/apparmor.txt
@@ -9,6 +9,7 @@ profile jackett_addon flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
+  capability sys_chroot,
   capability sys_admin,
   file,
   signal,
diff --git a/jellyfin/apparmor.txt b/jellyfin/apparmor.txt
index bcd9a1514e..518f315281 100644
--- a/jellyfin/apparmor.txt
+++ b/jellyfin/apparmor.txt
@@ -10,6 +10,7 @@ profile addon_db21ed7f_jellyfin_nas flags=(attach_disconnected,mediate_deleted)
   capability net_admin,
   capability setgid,
   capability setuid,
+  capability sys_chroot,
   capability sys_admin,
   file,
   signal,
diff --git a/joal/apparmor.txt b/joal/apparmor.txt
index 0e17841abc..11be9e4f9b 100644
--- a/joal/apparmor.txt
+++ b/joal/apparmor.txt
@@ -8,6 +8,7 @@ profile joal_addon flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
+  capability sys_chroot,
   file,
   signal,
   mount,
diff --git a/joplin/apparmor.txt b/joplin/apparmor.txt
index 078355e7eb..5fa63375cd 100644
--- a/joplin/apparmor.txt
+++ b/joplin/apparmor.txt
@@ -8,6 +8,7 @@ profile joplin flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
+  capability sys_chroot,
   capability sys_time,
   file,
   signal,
diff --git a/kometa/apparmor.txt b/kometa/apparmor.txt
index 408f8b52ad..ef68f7520b 100644
--- a/kometa/apparmor.txt
+++ b/kometa/apparmor.txt
@@ -9,6 +9,7 @@ profile kometa_addon flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
+  capability sys_chroot,
   capability sys_admin,
   file,
   signal,
diff --git a/librespeed/apparmor.txt b/librespeed/apparmor.txt
index 397d3d7772..e1841038fd 100644
--- a/librespeed/apparmor.txt
+++ b/librespeed/apparmor.txt
@@ -8,6 +8,7 @@ profile librespeed_addon flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
+  capability sys_chroot,
   file,
   signal,
   mount,
diff --git a/lidarr/apparmor.txt b/lidarr/apparmor.txt
index 79884515a9..ebc45fefe2 100644
--- a/lidarr/apparmor.txt
+++ b/lidarr/apparmor.txt
@@ -1,6 +1,6 @@
 #include <tunables/global>
 
-profile radarr_addon flags=(attach_disconnected,mediate_deleted) {
+profile lidarr_addon flags=(attach_disconnected,mediate_deleted) {
   #include <abstractions/base>
 
   capability chown,
@@ -9,6 +9,7 @@ profile radarr_addon flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
+  capability sys_chroot,
   capability sys_admin,
   file,
   signal,
diff --git a/linkwarden/apparmor.txt b/linkwarden/apparmor.txt
index 40201f7c49..5ae1f619de 100644
--- a/linkwarden/apparmor.txt
+++ b/linkwarden/apparmor.txt
@@ -8,6 +8,7 @@ profile linkwarden_addon flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
+  capability sys_chroot,
   file,
   signal,
   mount,
diff --git a/maintainerr/apparmor.txt b/maintainerr/apparmor.txt
index c36ba131c2..929c3d90ed 100644
--- a/maintainerr/apparmor.txt
+++ b/maintainerr/apparmor.txt
@@ -8,6 +8,7 @@ profile maintainerr_addon flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
+  capability sys_chroot,
   file,
   signal,
   mount,
diff --git a/manyfold/apparmor.txt b/manyfold/apparmor.txt
index 2620064ab9..8811ead835 100644
--- a/manyfold/apparmor.txt
+++ b/manyfold/apparmor.txt
@@ -15,6 +15,7 @@ profile hassio-addons/manyfold flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
+  capability sys_chroot,
 
   deny /proc/kcore rwklx,
   deny /proc/sysrq-trigger rwklx,
diff --git a/mealie/apparmor.txt b/mealie/apparmor.txt
index 20893cbabb..94b3791d5b 100644
--- a/mealie/apparmor.txt
+++ b/mealie/apparmor.txt
@@ -8,6 +8,7 @@ profile mealie_addon flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
+  capability sys_chroot,
   file,
   signal,
   mount,
diff --git a/monica/apparmor.txt b/monica/apparmor.txt
index 137aca2aef..0219beaa69 100644
--- a/monica/apparmor.txt
+++ b/monica/apparmor.txt
@@ -8,6 +8,7 @@ profile monica_addon flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
+  capability sys_chroot,
   file,
   signal,
   mount,
diff --git a/mylar3/apparmor.txt b/mylar3/apparmor.txt
index ac181b7eda..e5d3c34867 100644
--- a/mylar3/apparmor.txt
+++ b/mylar3/apparmor.txt
@@ -9,6 +9,7 @@ profile mylar3_addon flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
+  capability sys_chroot,
   capability sys_admin,
   file,
   signal,
diff --git a/navidrome/apparmor.txt b/navidrome/apparmor.txt
index 14200b9550..ae788802ff 100644
--- a/navidrome/apparmor.txt
+++ b/navidrome/apparmor.txt
@@ -9,6 +9,7 @@ profile navidrome_addon flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
+  capability sys_chroot,
   capability sys_admin,
   file,
   signal,
diff --git a/netalertx/apparmor.txt b/netalertx/apparmor.txt
index 723e7e94fa..6128a3d2e7 100644
--- a/netalertx/apparmor.txt
+++ b/netalertx/apparmor.txt
@@ -10,6 +10,7 @@ profile netalertx_addon flags=(attach_disconnected,mediate_deleted) {
   capability net_raw,
   capability setgid,
   capability setuid,
+  capability sys_chroot,
   file,
   signal,
   mount,
diff --git a/nextcloud/apparmor.txt b/nextcloud/apparmor.txt
index e475cdd113..c46894eb95 100644
--- a/nextcloud/apparmor.txt
+++ b/nextcloud/apparmor.txt
@@ -9,6 +9,7 @@ profile nextcloud_addon flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
+  capability sys_chroot,
   capability sys_admin,
   file,
   signal,
diff --git a/nzbget/apparmor.txt b/nzbget/apparmor.txt
index 7dd4b14063..46bf4feb3c 100644
--- a/nzbget/apparmor.txt
+++ b/nzbget/apparmor.txt
@@ -9,6 +9,7 @@ profile nzbget_addon flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
+  capability sys_chroot,
   capability sys_admin,
   file,
   signal,
diff --git a/omni-tools/apparmor.txt b/omni-tools/apparmor.txt
index 5792ee4184..c91d938fc8 100644
--- a/omni-tools/apparmor.txt
+++ b/omni-tools/apparmor.txt
@@ -9,6 +9,7 @@ profile omni-tools flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
+  capability sys_chroot,
   file,
   signal (send) set=(kill,term,int,hup,cont),
 
diff --git a/openproject/apparmor.txt b/openproject/apparmor.txt
index 2f510f2bce..82947e7d09 100644
--- a/openproject/apparmor.txt
+++ b/openproject/apparmor.txt
@@ -8,6 +8,7 @@ profile openproject_addon flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
+  capability sys_chroot,
   file,
   signal,
   mount,
diff --git a/organizr/apparmor.txt b/organizr/apparmor.txt
index a3016461d7..e992bc89d3 100644
--- a/organizr/apparmor.txt
+++ b/organizr/apparmor.txt
@@ -8,6 +8,7 @@ profile organizr_addon flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
+  capability sys_chroot,
   file,
   signal,
   mount,
diff --git a/photoprism/apparmor.txt b/photoprism/apparmor.txt
index 40bd2d287e..6e0e75e99d 100644
--- a/photoprism/apparmor.txt
+++ b/photoprism/apparmor.txt
@@ -9,6 +9,7 @@ profile photoprism flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
+  capability sys_chroot,
   capability sys_admin,
   capability sys_rawio,
   file,
diff --git a/piwigo/apparmor.txt b/piwigo/apparmor.txt
index e980b8620f..3c63406ac7 100644
--- a/piwigo/apparmor.txt
+++ b/piwigo/apparmor.txt
@@ -9,6 +9,7 @@ profile piwigo_addon flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
+  capability sys_chroot,
   capability sys_admin,
   file,
   signal,
diff --git a/plex/apparmor.txt b/plex/apparmor.txt
index ccd64d889c..18e9a83cb9 100644
--- a/plex/apparmor.txt
+++ b/plex/apparmor.txt
@@ -9,6 +9,7 @@ profile addon_db21ed7f_plex_nas flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
+  capability sys_chroot,
   capability sys_admin,
   file,
   signal,
diff --git a/portainer/apparmor.txt b/portainer/apparmor.txt
index 41b6a2faa8..18980e067b 100644
--- a/portainer/apparmor.txt
+++ b/portainer/apparmor.txt
@@ -8,6 +8,7 @@ profile portainer_addon flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
+  capability sys_chroot,
   file,
   signal,
   mount,
diff --git a/portainer_agent/apparmor.txt b/portainer_agent/apparmor.txt
index 1374c50a7b..00dd57bd31 100644
--- a/portainer_agent/apparmor.txt
+++ b/portainer_agent/apparmor.txt
@@ -19,6 +19,7 @@ profile portainer_agent_addon flags=(attach_disconnected,mediate_deleted) {
   network unix dgram,
   capability setgid,
   capability setuid,
+  capability sys_chroot,
 
 
 # S6-Overlay
diff --git a/postgres_15/apparmor.txt b/postgres_15/apparmor.txt
index 2e806546f4..1b45ee7fb7 100644
--- a/postgres_15/apparmor.txt
+++ b/postgres_15/apparmor.txt
@@ -8,6 +8,7 @@ profile postgres_addon flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
+  capability sys_chroot,
   file,
   signal,
   mount,
diff --git a/prowlarr/apparmor.txt b/prowlarr/apparmor.txt
index 5bedb9bdc3..0fc7a13ed5 100644
--- a/prowlarr/apparmor.txt
+++ b/prowlarr/apparmor.txt
@@ -9,6 +9,7 @@ profile prowlarr_addon flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
+  capability sys_chroot,
   capability sys_admin,
   file,
   signal,
diff --git a/qbittorrent/apparmor.txt b/qbittorrent/apparmor.txt
index af4538926c..30a3aa7f6d 100644
--- a/qbittorrent/apparmor.txt
+++ b/qbittorrent/apparmor.txt
@@ -10,6 +10,7 @@ profile db21ed7f_qbittorrent flags=(attach_disconnected,mediate_deleted) {
   capability net_admin,
   capability setgid,
   capability setuid,
+  capability sys_chroot,
   capability sys_admin,
   file,
   signal,
diff --git a/radarr/apparmor.txt b/radarr/apparmor.txt
index 79884515a9..be87176cb3 100644
--- a/radarr/apparmor.txt
+++ b/radarr/apparmor.txt
@@ -9,6 +9,7 @@ profile radarr_addon flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
+  capability sys_chroot,
   capability sys_admin,
   file,
   signal,
diff --git a/readarr/apparmor.txt b/readarr/apparmor.txt
index 5dc39e473f..87afa04984 100644
--- a/readarr/apparmor.txt
+++ b/readarr/apparmor.txt
@@ -9,6 +9,7 @@ profile readarr_addon flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
+  capability sys_chroot,
   capability sys_admin,
   file,
   signal,
diff --git a/requestrr/apparmor.txt b/requestrr/apparmor.txt
index bfac78dfa8..def9b5a778 100644
--- a/requestrr/apparmor.txt
+++ b/requestrr/apparmor.txt
@@ -9,6 +9,7 @@ profile requestrr_addon flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
+  capability sys_chroot,
   capability sys_admin,
   file,
   signal,
diff --git a/resiliosync/apparmor.txt b/resiliosync/apparmor.txt
index 50aedd2293..7b5658fb6f 100644
--- a/resiliosync/apparmor.txt
+++ b/resiliosync/apparmor.txt
@@ -10,6 +10,7 @@ profile resiliosync_addon flags=(attach_disconnected,mediate_deleted) {
   capability net_admin,
   capability setgid,
   capability setuid,
+  capability sys_chroot,
   capability sys_admin,
   file,
   signal,
diff --git a/sabnzbd/apparmor.txt b/sabnzbd/apparmor.txt
index 34c6473b6d..35006d7083 100644
--- a/sabnzbd/apparmor.txt
+++ b/sabnzbd/apparmor.txt
@@ -9,6 +9,7 @@ profile sabnzbd_addon flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
+  capability sys_chroot,
   capability sys_admin,
   file,
   signal,
diff --git a/scrutiny/apparmor.txt b/scrutiny/apparmor.txt
index 3129a1e104..46465608f2 100644
--- a/scrutiny/apparmor.txt
+++ b/scrutiny/apparmor.txt
@@ -1,6 +1,6 @@
 #include <tunables/global>
 
-profile db21ed7f_scrutiny flags=(attach_disconnected,mediate_deleted) {
+profile scrutiny_addon flags=(attach_disconnected,mediate_deleted) {
   #include <abstractions/base>
 
   capability chown,
@@ -9,6 +9,7 @@ profile db21ed7f_scrutiny flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
+  capability sys_chroot,
   capability sys_admin,
   capability sys_rawio,
   file,
diff --git a/scrutiny_fa_original/apparmor.txt b/scrutiny_fa_original/apparmor.txt
index 3129a1e104..91b9caef83 100644
--- a/scrutiny_fa_original/apparmor.txt
+++ b/scrutiny_fa_original/apparmor.txt
@@ -1,6 +1,6 @@
 #include <tunables/global>
 
-profile db21ed7f_scrutiny flags=(attach_disconnected,mediate_deleted) {
+profile scrutiny_fa_original_addon flags=(attach_disconnected,mediate_deleted) {
   #include <abstractions/base>
 
   capability chown,
@@ -9,6 +9,7 @@ profile db21ed7f_scrutiny flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
+  capability sys_chroot,
   capability sys_admin,
   capability sys_rawio,
   file,
diff --git a/scrutiny_original/apparmor.txt b/scrutiny_original/apparmor.txt
index 3129a1e104..c25542fde1 100644
--- a/scrutiny_original/apparmor.txt
+++ b/scrutiny_original/apparmor.txt
@@ -1,6 +1,6 @@
 #include <tunables/global>
 
-profile db21ed7f_scrutiny flags=(attach_disconnected,mediate_deleted) {
+profile scrutiny_original_addon flags=(attach_disconnected,mediate_deleted) {
   #include <abstractions/base>
 
   capability chown,
@@ -9,6 +9,7 @@ profile db21ed7f_scrutiny flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
+  capability sys_chroot,
   capability sys_admin,
   capability sys_rawio,
   file,
diff --git a/seafile/apparmor.txt b/seafile/apparmor.txt
index 59ccd2f687..d7b05253ee 100644
--- a/seafile/apparmor.txt
+++ b/seafile/apparmor.txt
@@ -10,6 +10,7 @@ profile seafile_addon flags=(attach_disconnected,mediate_deleted) {
   capability net_admin,
   capability setgid,
   capability setuid,
+  capability sys_chroot,
   capability sys_admin,
   file,
   signal,
diff --git a/seerr/apparmor.txt b/seerr/apparmor.txt
index 894a2dcab9..b864fa668e 100644
--- a/seerr/apparmor.txt
+++ b/seerr/apparmor.txt
@@ -8,6 +8,7 @@ profile seerr_addon flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
+  capability sys_chroot,
   file,
   signal,
   mount,
diff --git a/social_to_mealie/apparmor.txt b/social_to_mealie/apparmor.txt
index ec6b3bade1..f15e8f2c10 100644
--- a/social_to_mealie/apparmor.txt
+++ b/social_to_mealie/apparmor.txt
@@ -8,6 +8,7 @@ profile social_to_mealie_addon flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
+  capability sys_chroot,
   file,
   signal,
   mount,
diff --git a/sonarr/apparmor.txt b/sonarr/apparmor.txt
index 09a642fb53..73568762d6 100644
--- a/sonarr/apparmor.txt
+++ b/sonarr/apparmor.txt
@@ -9,6 +9,7 @@ profile sonarr_addon flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
+  capability sys_chroot,
   capability sys_admin,
   file,
   signal,
diff --git a/sponsorblockcast/apparmor.txt b/sponsorblockcast/apparmor.txt
index 7d7a544e01..1796aea159 100644
--- a/sponsorblockcast/apparmor.txt
+++ b/sponsorblockcast/apparmor.txt
@@ -1,7 +1,8 @@
 #include <tunables/global>
 
-profile addon_updater flags=(attach_disconnected,mediate_deleted) {
+profile sponsorblockcast_addon flags=(attach_disconnected,mediate_deleted) {
   #include <abstractions/base>
+  capability sys_chroot,
 
   # Capabilities
   file,
diff --git a/spotweb/apparmor.txt b/spotweb/apparmor.txt
index 9c1e034096..397d82bf6b 100644
--- a/spotweb/apparmor.txt
+++ b/spotweb/apparmor.txt
@@ -8,6 +8,7 @@ profile spotweb_addon flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
+  capability sys_chroot,
   file,
   signal,
   mount,
diff --git a/tandoor_recipes/apparmor.txt b/tandoor_recipes/apparmor.txt
index 830250be35..acf4cff2d6 100644
--- a/tandoor_recipes/apparmor.txt
+++ b/tandoor_recipes/apparmor.txt
@@ -8,6 +8,7 @@ profile tandoor_recipes_addon flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
+  capability sys_chroot,
   file,
   signal,
   mount,
diff --git a/tdarr/apparmor.txt b/tdarr/apparmor.txt
index 83af164087..6b8437c2bc 100644
--- a/tdarr/apparmor.txt
+++ b/tdarr/apparmor.txt
@@ -9,6 +9,7 @@ profile db21ed7f_tdarr flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
+  capability sys_chroot,
   capability sys_admin,
   file,
   signal,
diff --git a/teamspeak/apparmor.txt b/teamspeak/apparmor.txt
index 481ae5d5bf..20d176c1dc 100644
--- a/teamspeak/apparmor.txt
+++ b/teamspeak/apparmor.txt
@@ -8,6 +8,7 @@ profile teamspeak_addon flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
+  capability sys_chroot,
   file,
   signal,
   mount,
diff --git a/transmission/apparmor.txt b/transmission/apparmor.txt
index 4c81f971dd..d4266f09cb 100644
--- a/transmission/apparmor.txt
+++ b/transmission/apparmor.txt
@@ -9,6 +9,7 @@ profile db21ed7f_transmission flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
+  capability sys_chroot,
   capability sys_admin,
   file,
   signal,
diff --git a/transmission_openvpn/apparmor.txt b/transmission_openvpn/apparmor.txt
index 64f9dc8a38..35acb17368 100644
--- a/transmission_openvpn/apparmor.txt
+++ b/transmission_openvpn/apparmor.txt
@@ -10,6 +10,7 @@ profile db21ed7f_transmission_openvpn flags=(attach_disconnected,mediate_deleted
   capability net_admin,
   capability setgid,
   capability setuid,
+  capability sys_chroot,
   capability sys_admin,
   file,
   signal,
diff --git a/ubooquity/apparmor.txt b/ubooquity/apparmor.txt
index 822212b754..069bfcb59e 100644
--- a/ubooquity/apparmor.txt
+++ b/ubooquity/apparmor.txt
@@ -9,6 +9,7 @@ profile ubooquity_addon flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
+  capability sys_chroot,
   capability sys_admin,
   file,
   signal,
diff --git a/unpackerr/apparmor.txt b/unpackerr/apparmor.txt
index 941a191fd4..a05e95aa93 100644
--- a/unpackerr/apparmor.txt
+++ b/unpackerr/apparmor.txt
@@ -9,6 +9,7 @@ profile unpackerr_addon flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
+  capability sys_chroot,
   capability sys_admin,
   file,
   signal,
diff --git a/webtop/apparmor.txt b/webtop/apparmor.txt
deleted file mode 120000
index 1273c882fb..0000000000
--- a/webtop/apparmor.txt
+++ /dev/null
@@ -1 +0,0 @@
-../webtop_kde/apparmor.txt
\ No newline at end of file
diff --git a/webtop/apparmor.txt b/webtop/apparmor.txt
new file mode 100644
index 0000000000..bfab3ffc0c
--- /dev/null
+++ b/webtop/apparmor.txt
@@ -0,0 +1,72 @@
+#include <tunables/global>
+
+profile webtop_addon flags=(attach_disconnected,mediate_deleted) {
+  #include <abstractions/base>
+
+  capability chown,
+  capability dac_override,
+  capability dac_read_search,
+  capability fowner,
+  capability setgid,
+  capability setuid,
+  capability sys_chroot,
+  capability sys_admin,
+  file,
+  signal,
+  mount,
+  umount,
+  remount,
+  network udp,
+  network tcp,
+  network dgram,
+  network stream,
+  network inet,
+  network inet6,
+  network netlink raw,
+  network unix dgram,
+
+
+# S6-Overlay
+  /init ix,
+  /run/{s6,s6-rc*,service}/** ix,
+  /package/** ix,
+  /command/** ix,
+  /run/{,**} rwk,
+  /dev/tty rw,
+  /bin/** ix,
+  /usr/bin/** ix,
+  /usr/lib/bashio/** ix,
+  /etc/s6/** rix,
+  /run/s6/** rix,
+  /etc/services.d/** rwix,
+  /etc/cont-init.d/** rwix,
+  /etc/cont-finish.d/** rwix,
+  /init rix,
+  /var/run/** mrwkl,
+  /var/run/ mrwkl,
+  /dev/i2c-1 mrwkl,
+  # Files required
+  /dev/fuse mrwkl,
+  /dev/sda1 mrwkl,
+  /dev/sdb1 mrwkl,
+  /dev/nvme0 mrwkl,
+  /dev/nvme0n1 mrwkl,
+  /dev/nvme1 mrwkl,
+  /dev/mmcblk0p1 mrwkl,
+  /dev/* mrwkl,
+  /udev/* mrwkl,
+  /tmp/** mrkwl,
+  /dev/fuse/** mrkwl,
+  /dev/** mrkwl,
+  /sys/firmware/** mrkwl,
+
+  # Data access
+  /data/** rw,
+
+  # suppress ptrace denials when using 'docker ps' or using 'ps' inside a container
+  ptrace (trace,read) peer=docker-default,
+
+  # docker daemon confinement requires explict allow rule for signal
+  signal (receive) set=(kill,term) peer=/usr/bin/docker,
+
+}
diff --git a/webtop_kde/apparmor.txt b/webtop_kde/apparmor.txt
index 52c5f1f0c9..d7fdfea13f 100644
--- a/webtop_kde/apparmor.txt
+++ b/webtop_kde/apparmor.txt
@@ -1,6 +1,6 @@
 #include <tunables/global>
 
-profile webtop_addon flags=(attach_disconnected,mediate_deleted) {
+profile webtop_kde_addon flags=(attach_disconnected,mediate_deleted) {
   #include <abstractions/base>
 
   capability chown,
@@ -9,6 +9,7 @@ profile webtop_addon flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
+  capability sys_chroot,
   capability sys_admin,
   file,
   signal,
diff --git a/webtrees/apparmor.txt b/webtrees/apparmor.txt
index 0136730bc2..7b99c7b7d2 100644
--- a/webtrees/apparmor.txt
+++ b/webtrees/apparmor.txt
@@ -9,6 +9,7 @@ profile webtrees_addon flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
+  capability sys_chroot,
   capability sys_admin,
   file,
   signal,
diff --git a/wger/apparmor.txt b/wger/apparmor.txt
index 924f074695..c92d44da15 100644
--- a/wger/apparmor.txt
+++ b/wger/apparmor.txt
@@ -8,6 +8,7 @@ profile wger_addon flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
+  capability sys_chroot,
   file,
   signal,
   mount,
diff --git a/whatsapper/apparmor.txt b/whatsapper/apparmor.txt
index a007b16bfd..6e72fb9ebd 100644
--- a/whatsapper/apparmor.txt
+++ b/whatsapper/apparmor.txt
@@ -1,6 +1,6 @@
 #include <tunables/global>
 
-profile gitea_addon flags=(attach_disconnected,mediate_deleted) {
+profile whatsapper_addon flags=(attach_disconnected,mediate_deleted) {
   #include <abstractions/base>
 
   capability chown,
@@ -8,6 +8,7 @@ profile gitea_addon flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
+  capability sys_chroot,
   file,
   signal,
   mount,
diff --git a/whoogle/apparmor.txt b/whoogle/apparmor.txt
index fba07a7981..0cb5ccd6d0 100644
--- a/whoogle/apparmor.txt
+++ b/whoogle/apparmor.txt
@@ -8,6 +8,7 @@ profile whoogle-search_addon flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
+  capability sys_chroot,
   file,
   signal,
   mount,
diff --git a/xteve/apparmor.txt b/xteve/apparmor.txt
index 1814a0b9bc..0bcd235bf4 100644
--- a/xteve/apparmor.txt
+++ b/xteve/apparmor.txt
@@ -8,6 +8,7 @@ profile xteve_addon flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
+  capability sys_chroot,
   file,
   signal,
   mount,
diff --git a/zoneminder/apparmor.txt b/zoneminder/apparmor.txt
index 25580d516b..5437ec289e 100644
--- a/zoneminder/apparmor.txt
+++ b/zoneminder/apparmor.txt
@@ -8,6 +8,7 @@ profile zoneminder_addon flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
+  capability sys_chroot,
   file,
   signal,
   mount,