diff --git a/apparmor.d/profiles-g-l/klist b/apparmor.d/profiles-g-l/klist
index 0dc0c89ba..9deeeedd8 100644
--- a/apparmor.d/profiles-g-l/klist
+++ b/apparmor.d/profiles-g-l/klist
@@ -10,12 +10,12 @@ include <tunables/global>
 profile klist @{exec_path} {
   include <abstractions/base>
 
-  @{exec_path} mr,
-
   #Allow root to list other users' creds cache
   capability dac_override,
   capability dac_read_search,
 
+  @{exec_path} mr,
+
   #Config Files
   /etc/krb5.conf r,
   /etc/krb5.conf.d/{,**} r,