diff --git a/pkg/aa/variables.go b/pkg/aa/variables.go
index 635c2c86..9a6d0db7 100644
--- a/pkg/aa/variables.go
+++ b/pkg/aa/variables.go
@@ -28,11 +28,11 @@ func DefaultTunables() *AppArmorProfile {
 	return &AppArmorProfile{
 		Preamble: Preamble{
 			Variables: []Variable{
-				{"bin", []string{"/{usr/,}{s,}bin"}},
-				{"lib", []string{"/{usr/,}lib{,exec,32,64}"}},
+				{"bin", []string{"/{,usr/}{,s}bin"}},
+				{"lib", []string{"/{,usr/}lib{,exec,32,64}"}},
 				{"multiarch", []string{"*-linux-gnu*"}},
 				{"user_share_dirs", []string{"/home/*/.local/share"}},
-				{"etc_ro", []string{"/{usr/,}etc/"}},
+				{"etc_ro", []string{"/{,usr/}etc/"}},
 			},
 		},
 	}
diff --git a/pkg/aa/variables_test.go b/pkg/aa/variables_test.go
index c9f1425a..0811c22b 100644
--- a/pkg/aa/variables_test.go
+++ b/pkg/aa/variables_test.go
@@ -19,11 +19,11 @@ func TestDefaultTunables(t *testing.T) {
 			want: &AppArmorProfile{
 				Preamble: Preamble{
 					Variables: []Variable{
-						{"bin", []string{"/{usr/,}{s,}bin"}},
-						{"lib", []string{"/{usr/,}lib{,exec,32,64}"}},
+						{"bin", []string{"/{,usr/}{,s}bin"}},
+						{"lib", []string{"/{,usr/}lib{,exec,32,64}"}},
 						{"multiarch", []string{"*-linux-gnu*"}},
 						{"user_share_dirs", []string{"/home/*/.local/share"}},
-						{"etc_ro", []string{"/{usr/,}etc/"}},
+						{"etc_ro", []string{"/{,usr/}etc/"}},
 					},
 				},
 			},