diff --git a/dnsmasq/CHANGELOG.md b/dnsmasq/CHANGELOG.md
index 4655114..edfb90e 100644
--- a/dnsmasq/CHANGELOG.md
+++ b/dnsmasq/CHANGELOG.md
@@ -1,5 +1,9 @@
 # Changelog
 
+## 1.4.2
+
+- Second run for AppArmor profile
+
 ## 1.4.1
 
 - Fix AppArmor profile
diff --git a/dnsmasq/apparmor.txt b/dnsmasq/apparmor.txt
index b5738da..ef1cfee 100644
--- a/dnsmasq/apparmor.txt
+++ b/dnsmasq/apparmor.txt
@@ -3,19 +3,22 @@
 profile dnsmasq flags=(attach_disconnected,mediate_deleted) {
   #include <abstractions/base>
 
+  file,
+
   # S6-Overlay & Bashio
   /init rix,
   /bin/** ix,
   /usr/bin/** ix,
   /usr/lib/bashio/** ix,
-  /etc/s6/** ix,
-  /run/s6/** ix,
+  /etc/s6/** rix,
+  /run/s6/** rwix,
   /etc/services.d/** rwix,
   /etc/cont-init.d/** rwix,
-  /etc/cont-finish.d/** rwix
+  /etc/cont-finish.d/** rwix,
 
   # Data access
   /data/** rw,
+  /run/** rwk,
 
   # Execution program
   /usr/sbin/dnsmasq cx,
@@ -31,10 +34,12 @@ profile dnsmasq flags=(attach_disconnected,mediate_deleted) {
     network inet raw,
     network inet6 raw,
 
+    /usr/sbin/dnsmasq rm,
+
     /etc/dnsmasq.conf rw,
     /run/*dnsmasq*.pid w,
-    /run/dnsmasq/ r,
-    /run/dnsmasq/* rw,
+    /run/dnsmasq/** rw,
     /tmp/* rw,
+    /proc/* r,
   }
 }
diff --git a/dnsmasq/config.json b/dnsmasq/config.json
index 17b8cbc..7482f00 100644
--- a/dnsmasq/config.json
+++ b/dnsmasq/config.json
@@ -1,6 +1,6 @@
 {
   "name": "Dnsmasq",
-  "version": "1.4.1",
+  "version": "1.4.2",
   "slug": "dnsmasq",
   "description": "A simple DNS server",
   "url": "https://github.com/home-assistant/hassio-addons/tree/master/dnsmasq",