refactor(profiles): use @{bin} and @{lib} in profiles (7)

apparmor.d/profiles-s-z/startx

@@ -7,28 +7,28 @@ abi <abi/3.0>,
 
 include <tunables/global>
 
-@{exec_path} = /{usr/,}bin/startx
+@{exec_path} = @{bin}/startx
 profile startx @{exec_path} flags=(attach_disconnected) {
   include <abstractions/base>
   include <abstractions/consoles>
   include <abstractions/nameservice-strict>
 
   @{exec_path} r,
-  /{usr/,}bin/{,ba,da}sh rix,
+  @{bin}/{,ba,da}sh rix,
 
-  /{usr/,}bin/{,e}grep   rix,
-  /{usr/,}bin/deallocvt  rix,
-  /{usr/,}bin/expr       rix,
-  /{usr/,}bin/hostname   rix,
-  /{usr/,}bin/mcookie    rix,
-  /{usr/,}bin/mktemp     rix,
-  /{usr/,}bin/rm         rix,
-  /{usr/,}bin/sed        rix,
-  /{usr/,}bin/tty        rix,
-  /{usr/,}bin/uname      rix,
+  @{bin}/{,e}grep   rix,
+  @{bin}/deallocvt  rix,
+  @{bin}/expr       rix,
+  @{bin}/hostname   rix,
+  @{bin}/mcookie    rix,
+  @{bin}/mktemp     rix,
+  @{bin}/rm         rix,
+  @{bin}/sed        rix,
+  @{bin}/tty        rix,
+  @{bin}/uname      rix,
 
-  /{usr/,}bin/xauth      rPx,
-  /{usr/,}bin/xinit      rPx,
+  @{bin}/xauth      rPx,
+  @{bin}/xinit      rPx,
 
   /usr/share/terminfo/** r,