diff --git a/contrib/apparmor/usr.local.bin.lokinet b/contrib/apparmor/usr.bin.lokinet
similarity index 76%
rename from contrib/apparmor/usr.local.bin.lokinet
rename to contrib/apparmor/usr.bin.lokinet
index 471df5064..97791cbb8 100644
--- a/contrib/apparmor/usr.local.bin.lokinet
+++ b/contrib/apparmor/usr.bin.lokinet
@@ -1,7 +1,7 @@
 # Last Modified: Sat May  4 18:48:24 2019
 #include <tunables/global>
 
-/usr/local/bin/lokinet {
+/usr/bin/lokinet {
   #include <abstractions/base>
 
   capability net_admin,
@@ -13,7 +13,10 @@
 
   /dev/net/tun rw,
   /lib/@{multiarch}/ld-*.so mr,
-  /usr/local/bin/lokinet mr,
+  /usr/bin/lokinet mr,
+
+  owner /var/lib/lokinet/ rw,
+  owner /var/lib/lokinet/** rwk,
 
   owner @{HOME}/.lokinet/ rw,
   owner @{HOME}/.lokinet/** rwk,