diff --git a/apparmor.d/groups/apt/apt-systemd-daily b/apparmor.d/groups/apt/apt-systemd-daily
index 08e1400b2..bd2f7fbb0 100644
--- a/apparmor.d/groups/apt/apt-systemd-daily
+++ b/apparmor.d/groups/apt/apt-systemd-daily
@@ -25,7 +25,7 @@ profile apt-systemd-daily @{exec_path} {
   @{bin}/env        rix,
   @{bin}/find       rix,
   @{bin}/flock      rix,
-  @{bin}/grep       rix,
+  @{bin}/{,e}grep   rix,
   @{bin}/gzip       rix,
   @{bin}/ls         rix,
   @{bin}/mv         rix,
diff --git a/apparmor.d/groups/apt/dpkg-script-apparmor b/apparmor.d/groups/apt/dpkg-script-apparmor
index e9a03f282..122e4541e 100644
--- a/apparmor.d/groups/apt/dpkg-script-apparmor
+++ b/apparmor.d/groups/apt/dpkg-script-apparmor
@@ -13,7 +13,7 @@ profile dpkg-script-apparmor @{exec_path} {
 
   @{exec_path} mrix,
 
-  @{bin}/grep   ix,
+  @{bin}/{,e}grep   ix,
 
   @{bin}/deb-systemd-helper  Px,
   @{bin}/deb-systemd-invoke  Px,
diff --git a/apparmor.d/groups/browsers/torbrowser-launcher b/apparmor.d/groups/browsers/torbrowser-launcher
index 0f6273107..4969a14c3 100644
--- a/apparmor.d/groups/browsers/torbrowser-launcher
+++ b/apparmor.d/groups/browsers/torbrowser-launcher
@@ -32,7 +32,7 @@ profile torbrowser-launcher @{exec_path} flags=(attach_disconnected) {
   @{bin}/gpg{,2}   Cx -> gpg,
   @{bin}/gpgconf   Cx -> gpg,
   @{bin}/gpgsm     Cx -> gpg,
-  @{bin}/grep      ix,
+  @{bin}/{,e}grep  ix,
   @{bin}/sed       ix,
   @{bin}/tail      ix,
 
diff --git a/apparmor.d/groups/browsers/torbrowser-start b/apparmor.d/groups/browsers/torbrowser-start
index 58bb31ac8..ce6a3678c 100644
--- a/apparmor.d/groups/browsers/torbrowser-start
+++ b/apparmor.d/groups/browsers/torbrowser-start
@@ -22,7 +22,7 @@ profile torbrowser-start @{exec_path} {
   @{bin}/expr                  ix,
   @{bin}/file                  ix,
   @{bin}/getconf               ix,
-  @{bin}/grep                  ix,
+  @{bin}/{,e}grep              ix,
   @{bin}/id                    ix,
   @{bin}/ln                    ix,
   @{bin}/mkdir                 ix,
diff --git a/apparmor.d/groups/cron/cron-ntp b/apparmor.d/groups/cron/cron-ntp
index 17ab7f745..7221cc6e1 100644
--- a/apparmor.d/groups/cron/cron-ntp
+++ b/apparmor.d/groups/cron/cron-ntp
@@ -14,7 +14,7 @@ profile cron-ntp @{exec_path} {
 
   @{sh_path}     rix,
   @{bin}/cat     rix,
-  @{bin}/grep    rix,
+  @{bin}/{,e}grep  rix,
   @{bin}/sed     rix,
 
   include if exists <local/cron-ntp>
diff --git a/apparmor.d/groups/cron/cron-popularity-contest b/apparmor.d/groups/cron/cron-popularity-contest
index 63a664096..fa6e9874f 100644
--- a/apparmor.d/groups/cron/cron-popularity-contest
+++ b/apparmor.d/groups/cron/cron-popularity-contest
@@ -18,7 +18,7 @@ profile cron-popularity-contest @{exec_path} {
 
   @{bin}/cat                 rix,
   @{bin}/date                rix,
-  @{bin}/grep                rix,
+  @{bin}/{,e}grep            rix,
   @{bin}/logger              rix,
   @{bin}/mkdir               rix,
   @{bin}/mktemp              rix,
diff --git a/apparmor.d/groups/cups/cupsd b/apparmor.d/groups/cups/cupsd
index 6eeeaa414..b3658b738 100644
--- a/apparmor.d/groups/cups/cupsd
+++ b/apparmor.d/groups/cups/cupsd
@@ -50,7 +50,7 @@ profile cupsd @{exec_path} flags=(attach_disconnected) {
   @{bin}/cat                 rix,
   @{bin}/chmod               rix,
   @{bin}/cp                  rix,
-  @{bin}/grep                rix,
+  @{bin}/{,e}grep            rix,
   @{bin}/gs                  rix,
   @{bin}/gsc                 rix,
   @{bin}/hostname            rix,
diff --git a/apparmor.d/groups/display-manager/xdm-xsession b/apparmor.d/groups/display-manager/xdm-xsession
index 052180a99..d110fb83b 100644
--- a/apparmor.d/groups/display-manager/xdm-xsession
+++ b/apparmor.d/groups/display-manager/xdm-xsession
@@ -25,7 +25,7 @@ profile xdm-xsession @{exec_path} {
   @{bin}/fortune           rPUx,
   @{bin}/gpg-agent          rPx,
   @{bin}/gpg-connect-agent  rPx,
-  @{bin}/grep               rix,
+  @{bin}/{,e}grep           rix,
   @{bin}/locale             rix,
   @{bin}/manpath            rix,
   @{bin}/readlink           rix,
diff --git a/apparmor.d/groups/filesystem/lvmpolld b/apparmor.d/groups/filesystem/lvmpolld
index 4168ad4fe..cce01b0d0 100644
--- a/apparmor.d/groups/filesystem/lvmpolld
+++ b/apparmor.d/groups/filesystem/lvmpolld
@@ -13,7 +13,7 @@ profile lvmpolld @{exec_path} {
   include <abstractions/nameservice-strict>
 
   @{exec_path} rm,
-  @{bin}/grep rix,
+  @{bin}/{,e}grep rix,
   @{bin}/umount rPx,
 
   @{run}/lvmpolld.pid rwk,
diff --git a/apparmor.d/groups/freedesktop/plymouth-set-default-theme b/apparmor.d/groups/freedesktop/plymouth-set-default-theme
index b9b2cfd45..da13572e5 100644
--- a/apparmor.d/groups/freedesktop/plymouth-set-default-theme
+++ b/apparmor.d/groups/freedesktop/plymouth-set-default-theme
@@ -15,7 +15,7 @@ profile plymouth-set-default-theme @{exec_path} flags=(attach_disconnected) {
 
   @{sh_path}         rix,
   @{bin}/{m,g,}awk   rix,
-  @{bin}/grep        rix,
+  @{bin}/{,e}grep    rix,
   @{bin}/plymouth    rPx,
 
   /usr/share/plymouth/{,**} r,
diff --git a/apparmor.d/groups/gnome/gnome-control-center b/apparmor.d/groups/gnome/gnome-control-center
index 2f9077d19..85b3268dd 100644
--- a/apparmor.d/groups/gnome/gnome-control-center
+++ b/apparmor.d/groups/gnome/gnome-control-center
@@ -67,7 +67,7 @@ profile gnome-control-center @{exec_path} flags=(attach_disconnected) {
   @{bin}/@{shells}     rUx,
 
   @{bin}/gcm-viewer    rix,
-  @{bin}/grep          rix,
+  @{bin}/{,e}grep      rix,
   @{bin}/locale        rix,
   @{bin}/sed           rix,
   @{bin}/tecla         rPx,
diff --git a/apparmor.d/groups/gnome/gnome-session b/apparmor.d/groups/gnome/gnome-session
index e0ff334db..1f29958d1 100644
--- a/apparmor.d/groups/gnome/gnome-session
+++ b/apparmor.d/groups/gnome/gnome-session
@@ -20,7 +20,7 @@ profile gnome-session @{exec_path} {
   @{bin}/find                  rix,
   @{bin}/gettext               rix,
   @{bin}/gettext.sh              r,
-  @{bin}/grep                  rix,
+  @{bin}/{,e}grep              rix,
   @{bin}/head                  rix,
   @{bin}/id                    rix,
   @{bin}/locale                rix,
diff --git a/apparmor.d/groups/gnome/gnome-shell b/apparmor.d/groups/gnome/gnome-shell
index b97d6d568..e977af95e 100644
--- a/apparmor.d/groups/gnome/gnome-shell
+++ b/apparmor.d/groups/gnome/gnome-shell
@@ -388,7 +388,7 @@ profile gnome-shell @{exec_path} flags=(attach_disconnected,mediate_deleted) {
     @{sh_path} mr,
 
     @{bin}/cat   rix,
-    @{bin}/grep  rix,
+    @{bin}/{,e}grep  rix,
     @{bin}/kmod  rPx -> gnome-shell//lsmod,
     @{bin}/pmap  rix,
 
diff --git a/apparmor.d/groups/kde/kde-powerdevil b/apparmor.d/groups/kde/kde-powerdevil
index ebb150ed2..45c382855 100644
--- a/apparmor.d/groups/kde/kde-powerdevil
+++ b/apparmor.d/groups/kde/kde-powerdevil
@@ -24,7 +24,7 @@ profile kde-powerdevil @{exec_path} flags=(attach_disconnected mediate_deleted)
 
   @{sh_path}          rix,
   @{bin}/find         rix,
-  @{bin}/grep         rix,
+  @{bin}/{,e}grep     rix,
   @{bin}/kcminit      rPx,
   @{bin}/sed          rix,
   @{bin}/uname        rPx,
diff --git a/apparmor.d/groups/kde/startplasma b/apparmor.d/groups/kde/startplasma
index b69d7fdb9..004b89d57 100644
--- a/apparmor.d/groups/kde/startplasma
+++ b/apparmor.d/groups/kde/startplasma
@@ -21,7 +21,7 @@ profile startplasma @{exec_path} {
 
   @{sh_path}                rix,
   @{bin}/env                rix,
-  @{bin}/grep               rix,
+  @{bin}/{,e}grep           rix,
   @{bin}/kapplymousetheme  rPUx,
   @{bin}/kdeinit5_shutdown rPUx,
   @{bin}/ksplashqml        rPUx,
diff --git a/apparmor.d/groups/network/nm-dispatcher b/apparmor.d/groups/network/nm-dispatcher
index 87207e2b7..87a418153 100644
--- a/apparmor.d/groups/network/nm-dispatcher
+++ b/apparmor.d/groups/network/nm-dispatcher
@@ -42,7 +42,7 @@ profile nm-dispatcher @{exec_path} flags=(attach_disconnected) {
   @{bin}/chronyc           rPUx,
   @{bin}/date               rix,
   @{bin}/gawk               rix,
-  @{bin}/grep               rix,
+  @{bin}/{,e}grep           rix,
   @{bin}/id                 rix,
   @{sbin}/invoke-rc.d       rCx -> invoke-rc,
   @{bin}/logger             rix,
diff --git a/apparmor.d/groups/pacman/aurpublish b/apparmor.d/groups/pacman/aurpublish
index a7a7bf225..df9af9fef 100644
--- a/apparmor.d/groups/pacman/aurpublish
+++ b/apparmor.d/groups/pacman/aurpublish
@@ -30,7 +30,7 @@ profile aurpublish @{exec_path} {
   @{bin}/gettext     rix,
   @{bin}/git         rPx,
   @{bin}/gpg{,2}     rCx -> gpg,
-  @{bin}/grep        rix,
+  @{bin}/{,e}grep    rix,
   @{bin}/makepkg     rix,
   @{bin}/mkdir       rix,
   @{bin}/mktemp      rix,
diff --git a/apparmor.d/groups/pacman/pacman-key b/apparmor.d/groups/pacman/pacman-key
index 287bc026a..025d87b29 100644
--- a/apparmor.d/groups/pacman/pacman-key
+++ b/apparmor.d/groups/pacman/pacman-key
@@ -22,7 +22,7 @@ profile pacman-key @{exec_path} {
   @{bin}/chmod        rix,
   @{bin}/gettext      rix,
   @{bin}/gpg{,2}      rCx -> gpg,
-  @{bin}/grep         rix,
+  @{bin}/{,e}grep     rix,
   @{bin}/ngettext     rix,
   @{bin}/pacman-conf  rPx,
   @{bin}/touch        rix,
diff --git a/apparmor.d/groups/ssh/ssh-agent-launch b/apparmor.d/groups/ssh/ssh-agent-launch
index c9f0c6373..86bd0866f 100644
--- a/apparmor.d/groups/ssh/ssh-agent-launch
+++ b/apparmor.d/groups/ssh/ssh-agent-launch
@@ -15,7 +15,7 @@ profile ssh-agent-launch @{exec_path} {
   @{sh_path}            rix,
   @{bin}/dbus-update-activation-environment  rCx -> dbus,
   @{bin}/getopt         rix,
-  @{bin}/grep           rix,
+  @{bin}/{,e}grep       rix,
   @{bin}/ssh-agent      rPx,
 
   /etc/X11/Xsession.options r,
diff --git a/apparmor.d/groups/systemd-generators/systemd-generator-ds-identify b/apparmor.d/groups/systemd-generators/systemd-generator-ds-identify
index ba6141d86..daa877efe 100644
--- a/apparmor.d/groups/systemd-generators/systemd-generator-ds-identify
+++ b/apparmor.d/groups/systemd-generators/systemd-generator-ds-identify
@@ -17,7 +17,7 @@ profile systemd-generator-ds-identify @{exec_path} flags=(attach_disconnected) {
   @{exec_path} mr,
 
   @{sh_path}                     rix,
-  @{bin}/grep                    rix,
+  @{bin}/{,e}grep                rix,
   @{bin}/systemd-detect-virt     rPx,
   @{bin}/tr                      rix,
   @{bin}/uname                   rix,
diff --git a/apparmor.d/groups/systemd-service/grub-common.service b/apparmor.d/groups/systemd-service/grub-common.service
index 4abd74fb1..f8cf34f25 100644
--- a/apparmor.d/groups/systemd-service/grub-common.service
+++ b/apparmor.d/groups/systemd-service/grub-common.service
@@ -14,7 +14,7 @@ profile grub-common.service {
   include <abstractions/base>
 
   @{sh_path}           rix,
-  @{bin}/grep           ix,
+  @{bin}/{,e}grep       ix,
   @{bin}/grub-editenv  rix,
   @{bin}/mkdir          ix,
   @{bin}/rm             ix,
diff --git a/apparmor.d/groups/systemd/systemd-sleep-grub b/apparmor.d/groups/systemd/systemd-sleep-grub
index b2b42bf44..38be5772f 100644
--- a/apparmor.d/groups/systemd/systemd-sleep-grub
+++ b/apparmor.d/groups/systemd/systemd-sleep-grub
@@ -14,7 +14,7 @@ profile systemd-sleep-grub @{exec_path} {
   @{exec_path} mr,
 
   @{sh_path}              rix,
-  @{bin}/grep             rix,
+  @{bin}/{,e}grep         rix,
   @{bin}/uname            rix,
 
   /etc/sysconfig/bootloader r,
diff --git a/apparmor.d/groups/ubuntu/cron-ubuntu-fan b/apparmor.d/groups/ubuntu/cron-ubuntu-fan
index 9fd065db3..a80a4f729 100644
--- a/apparmor.d/groups/ubuntu/cron-ubuntu-fan
+++ b/apparmor.d/groups/ubuntu/cron-ubuntu-fan
@@ -16,7 +16,7 @@ profile cron-ubuntu-fan @{exec_path} {
 
   @{sh_path}         rix,
   @{sbin}/fanctl     rPx,
-  @{bin}/grep        rix,
+  @{bin}/{,e}grep    rix,
   @{bin}/ip          rix,
   @{bin}/mkdir       rix,
   @{bin}/sed         rix,
diff --git a/apparmor.d/groups/ubuntu/subiquity-console-conf b/apparmor.d/groups/ubuntu/subiquity-console-conf
index 840e33cdd..dc67817ed 100644
--- a/apparmor.d/groups/ubuntu/subiquity-console-conf
+++ b/apparmor.d/groups/ubuntu/subiquity-console-conf
@@ -24,7 +24,7 @@ profile subiquity-console-conf @{exec_path} {
 
   @{sh_path}         rix,
   @{bin}/cat         rix,
-  @{bin}/grep        rix,
+  @{bin}/{,e}grep    rix,
   @{bin}/ip          rix,
   @{bin}/mkdir       rix,
   @{bin}/mv          rix,
diff --git a/apparmor.d/groups/ubuntu/ubuntu-fan-net b/apparmor.d/groups/ubuntu/ubuntu-fan-net
index f9d7c01f5..74fe83551 100644
--- a/apparmor.d/groups/ubuntu/ubuntu-fan-net
+++ b/apparmor.d/groups/ubuntu/ubuntu-fan-net
@@ -14,7 +14,7 @@ profile ubuntu-fan-net @{exec_path} {
 
   @{sh_path}        mr,
   @{bin}/{m,g,}awk  ix,
-  @{bin}/grep       ix,
+  @{bin}/{,e}grep   ix,
   @{bin}/networkctl Px,
   @{sbin}/fanctl    Px,
 
diff --git a/apparmor.d/groups/ubuntu/update-motd-fsck-at-reboot b/apparmor.d/groups/ubuntu/update-motd-fsck-at-reboot
index 0573f38bf..c244f2902 100644
--- a/apparmor.d/groups/ubuntu/update-motd-fsck-at-reboot
+++ b/apparmor.d/groups/ubuntu/update-motd-fsck-at-reboot
@@ -18,7 +18,7 @@ profile update-motd-fsck-at-reboot @{exec_path} {
   @{bin}/cat           rix,
   @{bin}/cut           rix,
   @{bin}/date          rix,
-  @{bin}/grep          rix,
+  @{bin}/{,e}grep      rix,
   @{bin}/id            rix,
   @{bin}/mount         rCx -> mount,
   @{bin}/stat          rix,
diff --git a/apparmor.d/groups/whonix/anondate b/apparmor.d/groups/whonix/anondate
index 27e4eb594..325535cce 100644
--- a/apparmor.d/groups/whonix/anondate
+++ b/apparmor.d/groups/whonix/anondate
@@ -19,7 +19,7 @@ profile anondate @{exec_path} {
   @{bin}/cat rix,
   @{bin}/cp rix,
   @{bin}/date rix,
-  @{bin}/grep rix,
+  @{bin}/{,e}grep rix,
   @{bin}/minimum-unixtime-show rix,
   @{bin}/rm rix,
   @{bin}/systemd-cat rix,
diff --git a/apparmor.d/groups/whonix/pam-info b/apparmor.d/groups/whonix/pam-info
index 1cc3e7668..23ab3aeb4 100644
--- a/apparmor.d/groups/whonix/pam-info
+++ b/apparmor.d/groups/whonix/pam-info
@@ -15,7 +15,7 @@ profile pam-info @{exec_path} {
 
   @{sh_path}          rix,
   @{sbin}/faillock    rix,
-  @{bin}/grep         rix,
+  @{bin}/{,e}grep     rix,
   @{bin}/str_replace  rix,
   @{bin}/wc           rix,
   @{bin}/whoami       rix,
diff --git a/apparmor.d/groups/whonix/rads b/apparmor.d/groups/whonix/rads
index e76570b34..10f30b50b 100644
--- a/apparmor.d/groups/whonix/rads
+++ b/apparmor.d/groups/whonix/rads
@@ -20,7 +20,7 @@ profile rads @{exec_path} {
   @{bin}/chvt       rix,
   @{bin}/free       rix,
   @{bin}/gawk       rix,
-  @{bin}/grep       rix,
+  @{bin}/{,e}grep   rix,
   @{bin}/mkdir      rix,
   @{bin}/rm         rix,
   @{bin}/sed        rix,
diff --git a/apparmor.d/groups/whonix/sdwdate b/apparmor.d/groups/whonix/sdwdate
index d34f8087c..dbe561ab6 100644
--- a/apparmor.d/groups/whonix/sdwdate
+++ b/apparmor.d/groups/whonix/sdwdate
@@ -30,7 +30,7 @@ profile sdwdate @{exec_path} flags=(attach_disconnected) {
   @{bin}/touch                          rix,
   @{lib}/helper-scripts/*               rix,
   @{bin}/url_to_unixtime                rix,
-  @{bin}/grep rix,
+  @{bin}/{,e}grep rix,
 
   @{lib}/helper-scripts/ r,
   @{lib}/sdwdate/ r,
diff --git a/apparmor.d/groups/whonix/systemcheck-canary b/apparmor.d/groups/whonix/systemcheck-canary
index 4130d9cd9..17bedc43b 100644
--- a/apparmor.d/groups/whonix/systemcheck-canary
+++ b/apparmor.d/groups/whonix/systemcheck-canary
@@ -14,7 +14,7 @@ profile systemcheck-canary @{exec_path} {
   @{exec_path} mr,
 
   @{bin}/sleep rix,
-  @{bin}/grep rix,
+  @{bin}/{,e}grep rix,
   @{bin}/whoami rix,
   @{bin}/cat rix,
   @{bin}/date rix,
diff --git a/apparmor.d/groups/whonix/torbrowser-wrapper b/apparmor.d/groups/whonix/torbrowser-wrapper
index fc20ad0fb..c86d91099 100644
--- a/apparmor.d/groups/whonix/torbrowser-wrapper
+++ b/apparmor.d/groups/whonix/torbrowser-wrapper
@@ -20,7 +20,7 @@ profile torbrowser-wrapper @{exec_path} {
   @{bin}/basename                 ix,
   @{bin}/cp                       ix,
   @{bin}/dirname                  ix,
-  @{bin}/grep                     ix,
+  @{bin}/{,e}grep                 ix,
   @{bin}/id                       ix,
   @{bin}/mkdir                    ix,
   @{bin}/mktemp                   ix,
diff --git a/apparmor.d/profiles-a-f/blkdeactivate b/apparmor.d/profiles-a-f/blkdeactivate
index d56782267..83806e753 100644
--- a/apparmor.d/profiles-a-f/blkdeactivate
+++ b/apparmor.d/profiles-a-f/blkdeactivate
@@ -16,7 +16,7 @@ profile blkdeactivate @{exec_path} flags=(complain) {
 
   @{sh_path}             rix,
   @{sbin}/dmsetup        rPUx,
-  @{bin}/grep            rix,
+  @{bin}/{,e}grep        rix,
   @{bin}/touch           rix,
   @{bin}/lsblk           rPx,
   @{sbin}/lvm            rPx,
diff --git a/apparmor.d/profiles-a-f/ddcutil b/apparmor.d/profiles-a-f/ddcutil
index c752dcbb8..7c353bf65 100644
--- a/apparmor.d/profiles-a-f/ddcutil
+++ b/apparmor.d/profiles-a-f/ddcutil
@@ -21,7 +21,7 @@ profile ddcutil @{exec_path} {
   @{bin}/find              rix,
   @{bin}/sed               rix,
   @{bin}/xargs             rix,
-  @{bin}/grep              rix,
+  @{bin}/{,e}grep          rix,
 
   / r,
 
diff --git a/apparmor.d/profiles-a-f/finalrd b/apparmor.d/profiles-a-f/finalrd
index d8f2f819e..b22730a27 100644
--- a/apparmor.d/profiles-a-f/finalrd
+++ b/apparmor.d/profiles-a-f/finalrd
@@ -24,7 +24,7 @@ profile finalrd @{exec_path} {
   @{bin}/dirname            ix,
   @{bin}/env                ix,
   @{bin}/find               ix,
-  @{bin}/grep               ix,
+  @{bin}/{,e}grep           ix,
   @{bin}/ln                 ix,
   @{bin}/mkdir              ix,
   @{bin}/mount              ix,
diff --git a/apparmor.d/profiles-g-l/gpu-manager b/apparmor.d/profiles-g-l/gpu-manager
index 795c92f00..779dd8e67 100644
--- a/apparmor.d/profiles-g-l/gpu-manager
+++ b/apparmor.d/profiles-g-l/gpu-manager
@@ -17,7 +17,7 @@ profile gpu-manager @{exec_path} {
   @{exec_path} mr,
 
   @{sh_path}   rix,
-  @{bin}/grep  rix,
+  @{bin}/{,e}grep  rix,
 
   /etc/modprobe.d/{,**} r,
   /usr/lib/modprobe.d/{,**} r,
diff --git a/apparmor.d/profiles-g-l/install-catalog b/apparmor.d/profiles-g-l/install-catalog
index b1a56c41d..6a26d4dea 100644
--- a/apparmor.d/profiles-g-l/install-catalog
+++ b/apparmor.d/profiles-g-l/install-catalog
@@ -16,7 +16,7 @@ profile install-catalog @{exec_path} {
 
   @{sh_path}       rix,
   @{bin}/basename  rix,
-  @{bin}/grep      rix,
+  @{bin}/{,e}grep  rix,
   @{bin}/mv        rix,
   @{bin}/rm        rix,
   @{bin}/sed       rix,
diff --git a/apparmor.d/profiles-g-l/kdump-config b/apparmor.d/profiles-g-l/kdump-config
index 2b3516202..f8b75f742 100644
--- a/apparmor.d/profiles-g-l/kdump-config
+++ b/apparmor.d/profiles-g-l/kdump-config
@@ -25,7 +25,7 @@ profile kdump-config @{exec_path} flags=(attach_disconnected) {
   @{bin}/file       ix,
   @{bin}/find       ix,
   @{bin}/flock      ix,
-  @{bin}/grep       ix,
+  @{bin}/{,e}grep   ix,
   @{bin}/hexdump    ix,
   @{bin}/ln         ix,
   @{bin}/logger     ix,
diff --git a/apparmor.d/profiles-g-l/landscape-sysinfo.wrapper b/apparmor.d/profiles-g-l/landscape-sysinfo.wrapper
index aeac3e6a1..056b2d83c 100644
--- a/apparmor.d/profiles-g-l/landscape-sysinfo.wrapper
+++ b/apparmor.d/profiles-g-l/landscape-sysinfo.wrapper
@@ -25,7 +25,7 @@ profile landscape-sysinfo.wrapper @{exec_path} {
   @{bin}/cut                rix,
   @{bin}/date               rix,
   @{bin}/find               rix,
-  @{bin}/grep               rix,
+  @{bin}/{,e}grep           rix,
   @{bin}/landscape-sysinfo  rPx,
 
   / r,
diff --git a/apparmor.d/profiles-g-l/language-validate b/apparmor.d/profiles-g-l/language-validate
index bf999b79e..80f914fab 100644
--- a/apparmor.d/profiles-g-l/language-validate
+++ b/apparmor.d/profiles-g-l/language-validate
@@ -15,7 +15,7 @@ profile language-validate @{exec_path} flags=(attach_disconnected) {
   @{exec_path} mrix,
 
   @{sh_path}         rix,
-  @{bin}/grep        rix,
+  @{bin}/{,e}grep    rix,
   @{bin}/locale      rix,
 
   /usr/share/locale-langpack/{,*} r,
diff --git a/apparmor.d/profiles-g-l/libreoffice b/apparmor.d/profiles-g-l/libreoffice
index 191ac5782..8cc8a65e1 100644
--- a/apparmor.d/profiles-g-l/libreoffice
+++ b/apparmor.d/profiles-g-l/libreoffice
@@ -43,7 +43,7 @@ profile libreoffice @{exec_path} {
   @{sh_path}        rix,
   @{bin}/basename   rix,
   @{bin}/dirname    rix,
-  @{bin}/grep       rix,
+  @{bin}/{,e}grep   rix,
   @{bin}/ls         rix,
   @{bin}/paperconf  rix,
   @{bin}/sed        rix,
diff --git a/apparmor.d/profiles-g-l/logrotate b/apparmor.d/profiles-g-l/logrotate
index 8d3dc2171..0dee9ed6a 100644
--- a/apparmor.d/profiles-g-l/logrotate
+++ b/apparmor.d/profiles-g-l/logrotate
@@ -30,7 +30,7 @@ profile logrotate @{exec_path} flags=(attach_disconnected) {
 
   @{sh_path}                    rix,
   @{bin}/cat                    rix,
-  @{bin}/grep                   rix,
+  @{bin}/{,e}grep               rix,
   @{bin}/gzip                   rix,
   @{sbin}/invoke-rc.d           rix,
   @{bin}/kill                   rix,
diff --git a/apparmor.d/profiles-m-r/modprobed-db b/apparmor.d/profiles-m-r/modprobed-db
index cd2ddc0e6..013143152 100644
--- a/apparmor.d/profiles-m-r/modprobed-db
+++ b/apparmor.d/profiles-m-r/modprobed-db
@@ -19,7 +19,7 @@ profile modprobed-db @{exec_path} {
   @{bin}/cut           rix,
   @{bin}/gawk          rix,
   @{bin}/getent        rix,
-  @{bin}/grep          rix,
+  @{bin}/{,e}grep      rix,
   @{bin}/logname       rix,
   @{bin}/md5sum        rix,
   @{bin}/rm            rix,
diff --git a/apparmor.d/profiles-m-r/needrestart-vmlinuz-get-version b/apparmor.d/profiles-m-r/needrestart-vmlinuz-get-version
index e5ee2fd8f..4474c1bfc 100644
--- a/apparmor.d/profiles-m-r/needrestart-vmlinuz-get-version
+++ b/apparmor.d/profiles-m-r/needrestart-vmlinuz-get-version
@@ -15,7 +15,7 @@ profile needrestart-vmlinuz-get-version @{exec_path} {
 
   @{sh_path}                   rix,
   @{bin}/bzip2                 rix,
-  @{bin}/grep                  rix,
+  @{bin}/{,e}grep              rix,
   @{bin}/gunzip                rix,
   @{bin}/gzip                  rix,
   @{bin}/lzop                  rix,
diff --git a/apparmor.d/profiles-m-r/pass b/apparmor.d/profiles-m-r/pass
index 5ae5df7e6..d13099bc3 100644
--- a/apparmor.d/profiles-m-r/pass
+++ b/apparmor.d/profiles-m-r/pass
@@ -24,7 +24,7 @@ profile pass @{exec_path} {
   @{bin}/env           r,
   @{bin}/find         ix,
   @{bin}/getopt       ix,
-  @{bin}/grep         ix,
+  @{bin}/{,e}grep     ix,
   @{bin}/head         ix,
   @{bin}/mkdir        ix,
   @{bin}/mktemp       ix,
diff --git a/apparmor.d/profiles-s-z/secure-time-sync b/apparmor.d/profiles-s-z/secure-time-sync
index 51016373d..9c3f6d9df 100644
--- a/apparmor.d/profiles-s-z/secure-time-sync
+++ b/apparmor.d/profiles-s-z/secure-time-sync
@@ -23,7 +23,7 @@ profile secure-time-sync @{exec_path} flags=(attach_disconnected) {
   @{sh_path}         rix,
   @{bin}/curl        rix,
   @{bin}/date        rix,
-  @{bin}/grep        rix,
+  @{bin}/{,e}grep    rix,
   @{bin}/id          rPx,
   @{bin}/sed         rix,
 
diff --git a/apparmor.d/profiles-s-z/spotify b/apparmor.d/profiles-s-z/spotify
index 1a0bd0ea9..dfd488a48 100644
--- a/apparmor.d/profiles-s-z/spotify
+++ b/apparmor.d/profiles-s-z/spotify
@@ -28,7 +28,7 @@ profile spotify @{exec_path} flags=(attach_disconnected) {
   @{exec_path} mrix,
 
   @{sh_path} mr,
-  @{bin}/grep rix,
+  @{bin}/{,e}grep rix,
 
   @{open_path}     rPx -> child-open-strict,
 
diff --git a/apparmor.d/profiles-s-z/syncoid b/apparmor.d/profiles-s-z/syncoid
index 821a3fd63..e275fb764 100644
--- a/apparmor.d/profiles-s-z/syncoid
+++ b/apparmor.d/profiles-s-z/syncoid
@@ -15,7 +15,7 @@ profile syncoid @{exec_path} flags=(complain) {
   @{exec_path} mr,
 
   @{sh_path}                     rix,
-  @{bin}/grep                    rix,
+  @{bin}/{,e}grep                rix,
   @{bin}/mbuffer                 rix,
   @{bin}/perl                    rix,
   @{bin}/ps                      rPx,
diff --git a/apparmor.d/profiles-s-z/sysstat-sa b/apparmor.d/profiles-s-z/sysstat-sa
index 37f5e3ca1..9dcc199bc 100644
--- a/apparmor.d/profiles-s-z/sysstat-sa
+++ b/apparmor.d/profiles-s-z/sysstat-sa
@@ -17,7 +17,7 @@ profile sysstat-sa @{exec_path} {
   @{sh_path}          rix,
   @{bin}/date          ix,
   @{bin}/find          ix,
-  @{bin}/grep          ix,
+  @{bin}/{,e}grep      ix,
   @{bin}/rm            ix,
   @{bin}/sar.sysstat   ix,
   @{bin}/xargs         ix,
diff --git a/apparmor.d/profiles-s-z/tlp b/apparmor.d/profiles-s-z/tlp
index c01edd9ec..9faea6e3e 100644
--- a/apparmor.d/profiles-s-z/tlp
+++ b/apparmor.d/profiles-s-z/tlp
@@ -32,7 +32,7 @@ profile tlp @{exec_path} flags=(attach_disconnected) {
   @{bin}/cp                     rix,
   @{sbin}/ethtool               rix,
   @{bin}/flock                  rix,
-  @{bin}/grep                   rix,
+  @{bin}/{,e}grep               rix,
   @{sbin}/hdparm                rPx,
   @{bin}/head                   rix,
   @{bin}/id                     rPx,
diff --git a/apparmor.d/profiles-s-z/ucfr b/apparmor.d/profiles-s-z/ucfr
index b38f8aae4..add5c5b64 100644
--- a/apparmor.d/profiles-s-z/ucfr
+++ b/apparmor.d/profiles-s-z/ucfr
@@ -16,7 +16,7 @@ profile ucfr @{exec_path} {
   @{bin}/basename               ix,
   @{bin}/{m,g,}awk              ix,
   @{bin}/getopt                 ix,
-  @{bin}/grep                   ix,
+  @{bin}/{,e}grep               ix,
   @{bin}/id                     ix,
   @{bin}/readlink               ix,
   @{bin}/sed                    ix,
diff --git a/apparmor.d/profiles-s-z/update-cracklib b/apparmor.d/profiles-s-z/update-cracklib
index b7f00b263..8f848b0ad 100644
--- a/apparmor.d/profiles-s-z/update-cracklib
+++ b/apparmor.d/profiles-s-z/update-cracklib
@@ -21,7 +21,7 @@ profile update-cracklib @{exec_path} {
   @{bin}/env                  rix,
   @{bin}/file                 rix,
   @{bin}/find                 rix,
-  @{bin}/grep                 rix,
+  @{bin}/{,e}grep             rix,
   @{bin}/gzip                 rix,
   @{bin}/install              rix,
   @{bin}/install              rix,
diff --git a/apparmor.d/profiles-s-z/veracrypt b/apparmor.d/profiles-s-z/veracrypt
index 1e5417b15..b9b92a721 100644
--- a/apparmor.d/profiles-s-z/veracrypt
+++ b/apparmor.d/profiles-s-z/veracrypt
@@ -30,7 +30,7 @@ profile veracrypt @{exec_path} {
   @{sh_path}       rix,
   @{open_path}     rPx -> child-open-help,
   @{sbin}/dmsetup   rPx,
-  @{bin}/grep      rix,
+  @{bin}/{,e}grep  rix,
   @{bin}/kmod      rix,
   @{sbin}/ldconfig  rix,
   @{sbin}/losetup   rCx -> losetup,
diff --git a/apparmor.d/profiles-s-z/whatis b/apparmor.d/profiles-s-z/whatis
index 43fa8ff09..3febd0b0b 100644
--- a/apparmor.d/profiles-s-z/whatis
+++ b/apparmor.d/profiles-s-z/whatis
@@ -13,7 +13,7 @@ profile whatis @{exec_path} {
   include <abstractions/consoles>
 
   @{exec_path} mr,
-  @{bin}/grep  rix,
+  @{bin}/{,e}grep  rix,
 
   /usr/{,**/}man/{,**/}{,whatis} r,
 
diff --git a/apparmor.d/profiles-s-z/zed b/apparmor.d/profiles-s-z/zed
index bb160a5e5..b131897d4 100644
--- a/apparmor.d/profiles-s-z/zed
+++ b/apparmor.d/profiles-s-z/zed
@@ -23,7 +23,7 @@ profile zed @{exec_path} {
   @{bin}/diff rix,
   @{bin}/expr rix,
   @{bin}/flock rix,
-  @{bin}/grep rix,
+  @{bin}/{,e}grep rix,
   @{bin}/hostname rix,
   @{bin}/logger rix,
   @{bin}/ls rix,