diff --git a/debian/README.Debian b/debian/README.Debian
index 323c16066b4cbec2874741143ee845cea0be9ef7..f1bab919839521c3b5f430e2daba8c676a6da03e 100644
--- a/debian/README.Debian
+++ b/debian/README.Debian
@@ -6,7 +6,8 @@ Included profiles
   the apparmor-profiles repository at commit 392d8ab.
 - irssi: taken from the apparmor-profiles repository at commit 392d8ab.
 - Pidgin: taken from the apparmor-profiles repository at commit 392d8ab.
-- tcpdump: taken from Ubuntu's tcpdump 4.8.1-2ubuntu1.
+- tcpdump: taken from Ubuntu's tcpdump 4.8.1-2ubuntu1 plus the patch submitted
+  on https://bugs.launchpad.net/ubuntu/+source/tcpdump/+bug/1647188.
 - Totem: taken from the apparmor-profiles repository at commit 392d8ab.
 
 Sources
@@ -17,4 +18,4 @@ apparmor-profiles repository
 
 https://code.launchpad.net/~apparmor-dev/apparmor-profiles/+git/apparmor-profiles/+ref/master
 
- -- intrigeri <intrigeri@debian.org>, Fri,  6 Jan 2017 09:57:15 +0100
+ -- intrigeri <intrigeri@debian.org>, Fri,  6 Jan 2017 09:58:46 +0100
diff --git a/profiles/usr.sbin.tcpdump b/profiles/usr.sbin.tcpdump
index 7402a7ba541a5602c84d23acc649d793893c4785..ca2a115ea3439de2e509fc0a2845d9ae20f1201b 100644
--- a/profiles/usr.sbin.tcpdump
+++ b/profiles/usr.sbin.tcpdump
@@ -41,8 +41,8 @@
   /dev/bus/usb/**/[0-9]* w,
 
   # for -z
-  /bin/gzip ixr,
-  /bin/bzip2 ixr,
+  /{usr/,}bin/gzip ixr,
+  /{usr/,}bin/bzip2 ixr,
 
   # for -F and -w
   audit deny @{HOME}/.* mrwkl,