diff --git a/utils/apparmor/usr.bin.wownero-wallet-cli b/utils/apparmor/usr.bin.wownero-wallet-cli
new file mode 100644
index 000000000..2650e70cb
--- /dev/null
+++ b/utils/apparmor/usr.bin.wownero-wallet-cli
@@ -0,0 +1,23 @@
+#include <tunables/global>
+
+# Change to wherever you store your wallet files and start wallet from.
+@{WALLET_DIR} = /home/*/Documents/Wownero
+
+profile wownero-wallet-cli /usr/{,local/}bin/wownero-wallet-cli {
+  #include <abstractions/base>
+  #include <abstractions/openssl>
+
+  # TODO: Use <abstractions/nameservice> when it is fixed.
+  /etc/gai.conf r,
+  /etc/host.conf r,
+  /etc/hosts r,
+  /etc/nsswitch.conf r,
+  /etc/resolv.conf r,
+
+  /etc/inputrc r,
+  /etc/terminfo/** r,
+
+  owner /home/*/.wow-shared-ringdb/* rwk,
+  owner @{WALLET_DIR}/* rwk,
+
+}
diff --git a/utils/apparmor/usr.bin.wownerod b/utils/apparmor/usr.bin.wownerod
new file mode 100644
index 000000000..a01fa9d2d
--- /dev/null
+++ b/utils/apparmor/usr.bin.wownerod
@@ -0,0 +1,19 @@
+#include <tunables/global>
+
+profile wownerod /usr/{,local/}bin/wownerod {
+  #include <abstractions/base>
+  #include <abstractions/openssl>
+
+  /etc/inputrc r,
+  /etc/terminfo/** r,
+
+  /sys/devices/**/rotational r,
+
+  owner /home/*/.wownero/{,/testnet/,/stagenet/} w,
+  owner /home/*/.wownero/{,/testnet/,/stagenet/}lmdb/ w,
+  owner /home/*/.wownero/{,/testnet/,/stagenet/}lmdb/* rwk,
+  owner /home/*/.wownero/{,/testnet/,/stagenet/}p2pstate.bin rw,
+  owner /home/*/.wownero/{,/testnet/,/stagenet/}wownero.conf r,
+  owner /home/*/.wownero/{,/testnet/,/stagenet/}wownero.log w,
+
+}