[AppArmor] Debian paths

contrib/apparmor/usr.bin.lokinet

@@ -1,7 +1,7 @@
 # Last Modified: Sat May  4 18:48:24 2019
 #include <tunables/global>
 
-/usr/local/bin/lokinet {
+/usr/bin/lokinet {
   #include <abstractions/base>
 
   capability net_admin,
@@ -13,7 +13,10 @@
 
   /dev/net/tun rw,
   /lib/@{multiarch}/ld-*.so mr,
-  /usr/local/bin/lokinet mr,
+  /usr/bin/lokinet mr,
+
+  owner /var/lib/lokinet/ rw,
+  owner /var/lib/lokinet/** rwk,
 
   owner @{HOME}/.lokinet/ rw,
   owner @{HOME}/.lokinet/** rwk,