diff --git a/debian/apparmor/system_i2p b/debian/apparmor/system_i2p
index 9af33b524220017f7429a22ca47c63ef59704f0d..0645b5f858f55dfe7469b81535ed715268ef7fdc 100644
--- a/debian/apparmor/system_i2p
+++ b/debian/apparmor/system_i2p
@@ -5,6 +5,7 @@ profile system_i2p {
   #include <abstractions/i2p>
 
   owner /{,lib/live/mount/overlay/}var/lib/i2p/** rwkl,
+  owner /{,lib/live/mount/overlay/}var/lib/i2p/i2p-config/eepsite/cgi-bin rix,
   owner /{,lib/live/mount/overlay/}var/log/i2p/* rw,
 
   owner /{,var/}run/i2p/{i2p,routerjvm}.pid rw,
diff --git a/debian/apparmor/usr.bin.i2prouter b/debian/apparmor/usr.bin.i2prouter
index 9f871e7ed8374bea96922d12c559fda42eef8ac2..cf8f9a17b92b46aba8a1e7ef44e39f0a4f2e0080 100644
--- a/debian/apparmor/usr.bin.i2prouter
+++ b/debian/apparmor/usr.bin.i2prouter
@@ -40,7 +40,8 @@
 
   @{HOME}/.java/fonts/**                r,
   owner  @{HOME}/.i2p/                  rw,
-  owner  @{HOME}/.i2p/**                rwk,
+  owner  @{HOME}/.i2p/**                rwkl,
+  owner  @{HOME}/.i2p/eepsite/cgi-bin/** rix,
 
   # Prevent spamming the logs
   deny owner @{HOME}/.java/             wk,