feat(profiles): ensure we use {,e}grep instead of grep.

2025-06-19 23:07:17 +02:00 · 2025-06-19 23:07:17 +02:00 · d2dbf771cc
commit d2dbf771cc
parent 0e4cc45a5b
55 changed files with 55 additions and 55 deletions
--- a/apparmor.d/groups/apt/apt-systemd-daily
+++ b/apparmor.d/groups/apt/apt-systemd-daily
@ -25,7 +25,7 @@ profile apt-systemd-daily @{exec_path} {
  @{bin}/env        rix,
  @{bin}/find       rix,
  @{bin}/flock      rix,
-  @{bin}/grep       rix,
+  @{bin}/{,e}grep   rix,
  @{bin}/gzip       rix,
  @{bin}/ls         rix,
  @{bin}/mv         rix,
--- a/apparmor.d/groups/apt/dpkg-script-apparmor
+++ b/apparmor.d/groups/apt/dpkg-script-apparmor
@ -13,7 +13,7 @@ profile dpkg-script-apparmor @{exec_path} {

  @{exec_path} mrix,

-  @{bin}/grep   ix,
+  @{bin}/{,e}grep   ix,

  @{bin}/deb-systemd-helper  Px,
  @{bin}/deb-systemd-invoke  Px,
--- a/apparmor.d/groups/browsers/torbrowser-launcher
+++ b/apparmor.d/groups/browsers/torbrowser-launcher
@ -32,7 +32,7 @@ profile torbrowser-launcher @{exec_path} flags=(attach_disconnected) {
  @{bin}/gpg{,2}   Cx -> gpg,
  @{bin}/gpgconf   Cx -> gpg,
  @{bin}/gpgsm     Cx -> gpg,
-  @{bin}/grep      ix,
+  @{bin}/{,e}grep  ix,
  @{bin}/sed       ix,
  @{bin}/tail      ix,

--- a/apparmor.d/groups/browsers/torbrowser-start
+++ b/apparmor.d/groups/browsers/torbrowser-start
@ -22,7 +22,7 @@ profile torbrowser-start @{exec_path} {
  @{bin}/expr                  ix,
  @{bin}/file                  ix,
  @{bin}/getconf               ix,
-  @{bin}/grep                  ix,
+  @{bin}/{,e}grep              ix,
  @{bin}/id                    ix,
  @{bin}/ln                    ix,
  @{bin}/mkdir                 ix,
--- a/apparmor.d/groups/cron/cron-ntp
+++ b/apparmor.d/groups/cron/cron-ntp
@ -14,7 +14,7 @@ profile cron-ntp @{exec_path} {

  @{sh_path}     rix,
  @{bin}/cat     rix,
-  @{bin}/grep    rix,
+  @{bin}/{,e}grep  rix,
  @{bin}/sed     rix,

  include if exists <local/cron-ntp>
--- a/apparmor.d/groups/cron/cron-popularity-contest
+++ b/apparmor.d/groups/cron/cron-popularity-contest
@ -18,7 +18,7 @@ profile cron-popularity-contest @{exec_path} {

  @{bin}/cat                 rix,
  @{bin}/date                rix,
-  @{bin}/grep                rix,
+  @{bin}/{,e}grep            rix,
  @{bin}/logger              rix,
  @{bin}/mkdir               rix,
  @{bin}/mktemp              rix,
--- a/apparmor.d/groups/cups/cupsd
+++ b/apparmor.d/groups/cups/cupsd
@ -50,7 +50,7 @@ profile cupsd @{exec_path} flags=(attach_disconnected) {
  @{bin}/cat                 rix,
  @{bin}/chmod               rix,
  @{bin}/cp                  rix,
-  @{bin}/grep                rix,
+  @{bin}/{,e}grep            rix,
  @{bin}/gs                  rix,
  @{bin}/gsc                 rix,
  @{bin}/hostname            rix,
--- a/apparmor.d/groups/display-manager/xdm-xsession
+++ b/apparmor.d/groups/display-manager/xdm-xsession
@ -25,7 +25,7 @@ profile xdm-xsession @{exec_path} {
  @{bin}/fortune           rPUx,
  @{bin}/gpg-agent          rPx,
  @{bin}/gpg-connect-agent  rPx,
-  @{bin}/grep               rix,
+  @{bin}/{,e}grep           rix,
  @{bin}/locale             rix,
  @{bin}/manpath            rix,
  @{bin}/readlink           rix,
--- a/apparmor.d/groups/filesystem/lvmpolld
+++ b/apparmor.d/groups/filesystem/lvmpolld
@ -13,7 +13,7 @@ profile lvmpolld @{exec_path} {
  include <abstractions/nameservice-strict>

  @{exec_path} rm,
-  @{bin}/grep rix,
+  @{bin}/{,e}grep rix,
  @{bin}/umount rPx,

  @{run}/lvmpolld.pid rwk,
--- a/apparmor.d/groups/freedesktop/plymouth-set-default-theme
+++ b/apparmor.d/groups/freedesktop/plymouth-set-default-theme
@ -15,7 +15,7 @@ profile plymouth-set-default-theme @{exec_path} flags=(attach_disconnected) {

  @{sh_path}         rix,
  @{bin}/{m,g,}awk   rix,
-  @{bin}/grep        rix,
+  @{bin}/{,e}grep    rix,
  @{bin}/plymouth    rPx,

  /usr/share/plymouth/{,**} r,
--- a/apparmor.d/groups/gnome/gnome-control-center
+++ b/apparmor.d/groups/gnome/gnome-control-center
@ -67,7 +67,7 @@ profile gnome-control-center @{exec_path} flags=(attach_disconnected) {
  @{bin}/@{shells}     rUx,

  @{bin}/gcm-viewer    rix,
-  @{bin}/grep          rix,
+  @{bin}/{,e}grep      rix,
  @{bin}/locale        rix,
  @{bin}/sed           rix,
  @{bin}/tecla         rPx,
--- a/apparmor.d/groups/gnome/gnome-session
+++ b/apparmor.d/groups/gnome/gnome-session
@ -20,7 +20,7 @@ profile gnome-session @{exec_path} {
  @{bin}/find                  rix,
  @{bin}/gettext               rix,
  @{bin}/gettext.sh              r,
-  @{bin}/grep                  rix,
+  @{bin}/{,e}grep              rix,
  @{bin}/head                  rix,
  @{bin}/id                    rix,
  @{bin}/locale                rix,
--- a/apparmor.d/groups/gnome/gnome-shell
+++ b/apparmor.d/groups/gnome/gnome-shell
@ -388,7 +388,7 @@ profile gnome-shell @{exec_path} flags=(attach_disconnected,mediate_deleted) {
    @{sh_path} mr,

    @{bin}/cat   rix,
-    @{bin}/grep  rix,
+    @{bin}/{,e}grep  rix,
    @{bin}/kmod  rPx -> gnome-shell//lsmod,
    @{bin}/pmap  rix,

--- a/apparmor.d/groups/kde/kde-powerdevil
+++ b/apparmor.d/groups/kde/kde-powerdevil
@ -24,7 +24,7 @@ profile kde-powerdevil @{exec_path} flags=(attach_disconnected mediate_deleted)

  @{sh_path}          rix,
  @{bin}/find         rix,
-  @{bin}/grep         rix,
+  @{bin}/{,e}grep     rix,
  @{bin}/kcminit      rPx,
  @{bin}/sed          rix,
  @{bin}/uname        rPx,
--- a/apparmor.d/groups/kde/startplasma
+++ b/apparmor.d/groups/kde/startplasma
@ -21,7 +21,7 @@ profile startplasma @{exec_path} {

  @{sh_path}                rix,
  @{bin}/env                rix,
-  @{bin}/grep               rix,
+  @{bin}/{,e}grep           rix,
  @{bin}/kapplymousetheme  rPUx,
  @{bin}/kdeinit5_shutdown rPUx,
  @{bin}/ksplashqml        rPUx,
--- a/apparmor.d/groups/network/nm-dispatcher
+++ b/apparmor.d/groups/network/nm-dispatcher
@ -42,7 +42,7 @@ profile nm-dispatcher @{exec_path} flags=(attach_disconnected) {
  @{bin}/chronyc           rPUx,
  @{bin}/date               rix,
  @{bin}/gawk               rix,
-  @{bin}/grep               rix,
+  @{bin}/{,e}grep           rix,
  @{bin}/id                 rix,
  @{sbin}/invoke-rc.d       rCx -> invoke-rc,
  @{bin}/logger             rix,
--- a/apparmor.d/groups/pacman/aurpublish
+++ b/apparmor.d/groups/pacman/aurpublish
@ -30,7 +30,7 @@ profile aurpublish @{exec_path} {
  @{bin}/gettext     rix,
  @{bin}/git         rPx,
  @{bin}/gpg{,2}     rCx -> gpg,
-  @{bin}/grep        rix,
+  @{bin}/{,e}grep    rix,
  @{bin}/makepkg     rix,
  @{bin}/mkdir       rix,
  @{bin}/mktemp      rix,
--- a/apparmor.d/groups/pacman/pacman-key
+++ b/apparmor.d/groups/pacman/pacman-key
@ -22,7 +22,7 @@ profile pacman-key @{exec_path} {
  @{bin}/chmod        rix,
  @{bin}/gettext      rix,
  @{bin}/gpg{,2}      rCx -> gpg,
-  @{bin}/grep         rix,
+  @{bin}/{,e}grep     rix,
  @{bin}/ngettext     rix,
  @{bin}/pacman-conf  rPx,
  @{bin}/touch        rix,
--- a/apparmor.d/groups/ssh/ssh-agent-launch
+++ b/apparmor.d/groups/ssh/ssh-agent-launch
@ -15,7 +15,7 @@ profile ssh-agent-launch @{exec_path} {
  @{sh_path}            rix,
  @{bin}/dbus-update-activation-environment  rCx -> dbus,
  @{bin}/getopt         rix,
-  @{bin}/grep           rix,
+  @{bin}/{,e}grep       rix,
  @{bin}/ssh-agent      rPx,

  /etc/X11/Xsession.options r,
--- a/apparmor.d/groups/systemd-generators/systemd-generator-ds-identify
+++ b/apparmor.d/groups/systemd-generators/systemd-generator-ds-identify
@ -17,7 +17,7 @@ profile systemd-generator-ds-identify @{exec_path} flags=(attach_disconnected) {
  @{exec_path} mr,

  @{sh_path}                     rix,
-  @{bin}/grep                    rix,
+  @{bin}/{,e}grep                rix,
  @{bin}/systemd-detect-virt     rPx,
  @{bin}/tr                      rix,
  @{bin}/uname                   rix,
--- a/apparmor.d/groups/systemd-service/grub-common.service
+++ b/apparmor.d/groups/systemd-service/grub-common.service
@ -14,7 +14,7 @@ profile grub-common.service {
  include <abstractions/base>

  @{sh_path}           rix,
-  @{bin}/grep           ix,
+  @{bin}/{,e}grep       ix,
  @{bin}/grub-editenv  rix,
  @{bin}/mkdir          ix,
  @{bin}/rm             ix,
--- a/apparmor.d/groups/systemd/systemd-sleep-grub
+++ b/apparmor.d/groups/systemd/systemd-sleep-grub
@ -14,7 +14,7 @@ profile systemd-sleep-grub @{exec_path} {
  @{exec_path} mr,

  @{sh_path}              rix,
-  @{bin}/grep             rix,
+  @{bin}/{,e}grep         rix,
  @{bin}/uname            rix,

  /etc/sysconfig/bootloader r,
--- a/apparmor.d/groups/ubuntu/cron-ubuntu-fan
+++ b/apparmor.d/groups/ubuntu/cron-ubuntu-fan
@ -16,7 +16,7 @@ profile cron-ubuntu-fan @{exec_path} {

  @{sh_path}         rix,
  @{sbin}/fanctl     rPx,
-  @{bin}/grep        rix,
+  @{bin}/{,e}grep    rix,
  @{bin}/ip          rix,
  @{bin}/mkdir       rix,
  @{bin}/sed         rix,
--- a/apparmor.d/groups/ubuntu/subiquity-console-conf
+++ b/apparmor.d/groups/ubuntu/subiquity-console-conf
@ -24,7 +24,7 @@ profile subiquity-console-conf @{exec_path} {

  @{sh_path}         rix,
  @{bin}/cat         rix,
-  @{bin}/grep        rix,
+  @{bin}/{,e}grep    rix,
  @{bin}/ip          rix,
  @{bin}/mkdir       rix,
  @{bin}/mv          rix,
--- a/apparmor.d/groups/ubuntu/ubuntu-fan-net
+++ b/apparmor.d/groups/ubuntu/ubuntu-fan-net
@ -14,7 +14,7 @@ profile ubuntu-fan-net @{exec_path} {

  @{sh_path}        mr,
  @{bin}/{m,g,}awk  ix,
-  @{bin}/grep       ix,
+  @{bin}/{,e}grep   ix,
  @{bin}/networkctl Px,
  @{sbin}/fanctl    Px,

--- a/apparmor.d/groups/ubuntu/update-motd-fsck-at-reboot
+++ b/apparmor.d/groups/ubuntu/update-motd-fsck-at-reboot
@ -18,7 +18,7 @@ profile update-motd-fsck-at-reboot @{exec_path} {
  @{bin}/cat           rix,
  @{bin}/cut           rix,
  @{bin}/date          rix,
-  @{bin}/grep          rix,
+  @{bin}/{,e}grep      rix,
  @{bin}/id            rix,
  @{bin}/mount         rCx -> mount,
  @{bin}/stat          rix,
--- a/apparmor.d/groups/whonix/anondate
+++ b/apparmor.d/groups/whonix/anondate
@ -19,7 +19,7 @@ profile anondate @{exec_path} {
  @{bin}/cat rix,
  @{bin}/cp rix,
  @{bin}/date rix,
-  @{bin}/grep rix,
+  @{bin}/{,e}grep rix,
  @{bin}/minimum-unixtime-show rix,
  @{bin}/rm rix,
  @{bin}/systemd-cat rix,
--- a/apparmor.d/groups/whonix/pam-info
+++ b/apparmor.d/groups/whonix/pam-info
@ -15,7 +15,7 @@ profile pam-info @{exec_path} {

  @{sh_path}          rix,
  @{sbin}/faillock    rix,
-  @{bin}/grep         rix,
+  @{bin}/{,e}grep     rix,
  @{bin}/str_replace  rix,
  @{bin}/wc           rix,
  @{bin}/whoami       rix,
--- a/apparmor.d/groups/whonix/rads
+++ b/apparmor.d/groups/whonix/rads
@ -20,7 +20,7 @@ profile rads @{exec_path} {
  @{bin}/chvt       rix,
  @{bin}/free       rix,
  @{bin}/gawk       rix,
-  @{bin}/grep       rix,
+  @{bin}/{,e}grep   rix,
  @{bin}/mkdir      rix,
  @{bin}/rm         rix,
  @{bin}/sed        rix,
--- a/apparmor.d/groups/whonix/sdwdate
+++ b/apparmor.d/groups/whonix/sdwdate
@ -30,7 +30,7 @@ profile sdwdate @{exec_path} flags=(attach_disconnected) {
  @{bin}/touch                          rix,
  @{lib}/helper-scripts/*               rix,
  @{bin}/url_to_unixtime                rix,
-  @{bin}/grep rix,
+  @{bin}/{,e}grep rix,

  @{lib}/helper-scripts/ r,
  @{lib}/sdwdate/ r,
--- a/apparmor.d/groups/whonix/systemcheck-canary
+++ b/apparmor.d/groups/whonix/systemcheck-canary
@ -14,7 +14,7 @@ profile systemcheck-canary @{exec_path} {
  @{exec_path} mr,

  @{bin}/sleep rix,
-  @{bin}/grep rix,
+  @{bin}/{,e}grep rix,
  @{bin}/whoami rix,
  @{bin}/cat rix,
  @{bin}/date rix,
--- a/apparmor.d/groups/whonix/torbrowser-wrapper
+++ b/apparmor.d/groups/whonix/torbrowser-wrapper
@ -20,7 +20,7 @@ profile torbrowser-wrapper @{exec_path} {
  @{bin}/basename                 ix,
  @{bin}/cp                       ix,
  @{bin}/dirname                  ix,
-  @{bin}/grep                     ix,
+  @{bin}/{,e}grep                 ix,
  @{bin}/id                       ix,
  @{bin}/mkdir                    ix,
  @{bin}/mktemp                   ix,