diff --git a/tasks/lxc_install_zypper.yml b/tasks/lxc_install_zypper.yml
index ac562ba9..a4e85e81 100644
--- a/tasks/lxc_install_zypper.yml
+++ b/tasks/lxc_install_zypper.yml
@@ -30,8 +30,9 @@
   blockinfile:
     path: "/etc/apparmor.d/local/usr.sbin.dnsmasq"
     block: |-
-      /etc/neutron/* r,
-      /var/log/neutron/* rw,
+      /etc/neutron/** r,
+      /var/log/neutron/** rw,
+      /var/lib/neutron/** rw,
     marker: "# {mark} ANSIBLE MANAGED BLOCK"
   notify:
     - Start apparmor