diff --git a/Makefile b/Makefile
index e998c34d9..58db7b5c1 100644
--- a/Makefile
+++ b/Makefile
@@ -241,6 +241,7 @@ utupdate: all
 	ln -sf ../../$(UBUNTUTOUCH_DIR)/koreader.sh $(INSTALL_DIR)/koreader
 	ln -sf ../../$(UBUNTUTOUCH_DIR)/manifest.json $(INSTALL_DIR)/koreader
 	ln -sf ../../$(UBUNTUTOUCH_DIR)/koreader.apparmor $(INSTALL_DIR)/koreader
+	ln -sf ../../$(UBUNTUTOUCH_DIR)/koreader.apparmor.openstore $(INSTALL_DIR)/koreader
 	ln -sf ../../$(UBUNTUTOUCH_DIR)/koreader.desktop $(INSTALL_DIR)/koreader
 	ln -sf ../../$(UBUNTUTOUCH_DIR)/koreader.png $(INSTALL_DIR)/koreader
 	ln -sf ../../../$(UBUNTUTOUCH_SDL_DIR)/lib/arm-linux-gnueabihf/libSDL2.so $(INSTALL_DIR)/koreader/libs
diff --git a/platform/ubuntu-touch/koreader.apparmor.openstore b/platform/ubuntu-touch/koreader.apparmor.openstore
new file mode 100644
index 000000000..a45b2c473
--- /dev/null
+++ b/platform/ubuntu-touch/koreader.apparmor.openstore
@@ -0,0 +1,15 @@
+{
+    "policy_groups": [
+        "networking"
+    ],
+    "read_path": [
+        "@{HOME}/",
+        "/media/*/*/[Dd][Oo][Cc][Uu][Mm][Ee][Nn][Tt][Ss]/",
+        "@{PROC}/*/mounts",
+        "/dev/disk/by-label/"
+    ],
+    "write_path": [
+        "@{HOME}/"
+    ],
+    "policy_version": 1.2
+}