feat(profiles): ensure we use {,e}grep instead of grep.

apparmor.d/groups/apt/apt-systemd-daily

@@ -25,7 +25,7 @@ profile apt-systemd-daily @{exec_path} {
   @{bin}/env        rix,
   @{bin}/find       rix,
   @{bin}/flock      rix,
-  @{bin}/grep       rix,
+  @{bin}/{,e}grep   rix,
   @{bin}/gzip       rix,
   @{bin}/ls         rix,
   @{bin}/mv         rix,

apparmor.d/groups/apt/dpkg-script-apparmor

@@ -13,7 +13,7 @@ profile dpkg-script-apparmor @{exec_path} {
 
   @{exec_path} mrix,
 
-  @{bin}/grep   ix,
+  @{bin}/{,e}grep   ix,
 
   @{bin}/deb-systemd-helper  Px,
   @{bin}/deb-systemd-invoke  Px,

apparmor.d/groups/browsers/torbrowser-launcher

@@ -32,7 +32,7 @@ profile torbrowser-launcher @{exec_path} flags=(attach_disconnected) {
   @{bin}/gpg{,2}   Cx -> gpg,
   @{bin}/gpgconf   Cx -> gpg,
   @{bin}/gpgsm     Cx -> gpg,
-  @{bin}/grep      ix,
+  @{bin}/{,e}grep  ix,
   @{bin}/sed       ix,
   @{bin}/tail      ix,
 

apparmor.d/groups/browsers/torbrowser-start

@@ -22,7 +22,7 @@ profile torbrowser-start @{exec_path} {
   @{bin}/expr                  ix,
   @{bin}/file                  ix,
   @{bin}/getconf               ix,
-  @{bin}/grep                  ix,
+  @{bin}/{,e}grep              ix,
   @{bin}/id                    ix,
   @{bin}/ln                    ix,
   @{bin}/mkdir                 ix,

apparmor.d/groups/cron/cron-ntp

@@ -14,7 +14,7 @@ profile cron-ntp @{exec_path} {
 
   @{sh_path}     rix,
   @{bin}/cat     rix,
-  @{bin}/grep    rix,
+  @{bin}/{,e}grep  rix,
   @{bin}/sed     rix,
 
   include if exists <local/cron-ntp>

apparmor.d/groups/cron/cron-popularity-contest

@@ -18,7 +18,7 @@ profile cron-popularity-contest @{exec_path} {
 
   @{bin}/cat                 rix,
   @{bin}/date                rix,
-  @{bin}/grep                rix,
+  @{bin}/{,e}grep            rix,
   @{bin}/logger              rix,
   @{bin}/mkdir               rix,
   @{bin}/mktemp              rix,

apparmor.d/groups/cups/cupsd

@@ -50,7 +50,7 @@ profile cupsd @{exec_path} flags=(attach_disconnected) {
   @{bin}/cat                 rix,
   @{bin}/chmod               rix,
   @{bin}/cp                  rix,
-  @{bin}/grep                rix,
+  @{bin}/{,e}grep            rix,
   @{bin}/gs                  rix,
   @{bin}/gsc                 rix,
   @{bin}/hostname            rix,

apparmor.d/groups/display-manager/xdm-xsession

@@ -25,7 +25,7 @@ profile xdm-xsession @{exec_path} {
   @{bin}/fortune           rPUx,
   @{bin}/gpg-agent          rPx,
   @{bin}/gpg-connect-agent  rPx,
-  @{bin}/grep               rix,
+  @{bin}/{,e}grep           rix,
   @{bin}/locale             rix,
   @{bin}/manpath            rix,
   @{bin}/readlink           rix,

apparmor.d/groups/filesystem/lvmpolld

@@ -13,7 +13,7 @@ profile lvmpolld @{exec_path} {
   include <abstractions/nameservice-strict>
 
   @{exec_path} rm,
-  @{bin}/grep rix,
+  @{bin}/{,e}grep rix,
   @{bin}/umount rPx,
 
   @{run}/lvmpolld.pid rwk,

apparmor.d/groups/freedesktop/plymouth-set-default-theme

@@ -15,7 +15,7 @@ profile plymouth-set-default-theme @{exec_path} flags=(attach_disconnected) {
 
   @{sh_path}         rix,
   @{bin}/{m,g,}awk   rix,
-  @{bin}/grep        rix,
+  @{bin}/{,e}grep    rix,
   @{bin}/plymouth    rPx,
 
   /usr/share/plymouth/{,**} r,

apparmor.d/groups/gnome/gnome-control-center

@@ -67,7 +67,7 @@ profile gnome-control-center @{exec_path} flags=(attach_disconnected) {
   @{bin}/@{shells}     rUx,
 
   @{bin}/gcm-viewer    rix,
-  @{bin}/grep          rix,
+  @{bin}/{,e}grep      rix,
   @{bin}/locale        rix,
   @{bin}/sed           rix,
   @{bin}/tecla         rPx,

apparmor.d/groups/gnome/gnome-session

@@ -20,7 +20,7 @@ profile gnome-session @{exec_path} {
   @{bin}/find                  rix,
   @{bin}/gettext               rix,
   @{bin}/gettext.sh              r,
-  @{bin}/grep                  rix,
+  @{bin}/{,e}grep              rix,
   @{bin}/head                  rix,
   @{bin}/id                    rix,
   @{bin}/locale                rix,

apparmor.d/groups/gnome/gnome-shell

@@ -388,7 +388,7 @@ profile gnome-shell @{exec_path} flags=(attach_disconnected,mediate_deleted) {
     @{sh_path} mr,
 
     @{bin}/cat   rix,
-    @{bin}/grep  rix,
+    @{bin}/{,e}grep  rix,
     @{bin}/kmod  rPx -> gnome-shell//lsmod,
     @{bin}/pmap  rix,
 

apparmor.d/groups/kde/kde-powerdevil

@@ -24,7 +24,7 @@ profile kde-powerdevil @{exec_path} flags=(attach_disconnected mediate_deleted)
 
   @{sh_path}          rix,
   @{bin}/find         rix,
-  @{bin}/grep         rix,
+  @{bin}/{,e}grep     rix,
   @{bin}/kcminit      rPx,
   @{bin}/sed          rix,
   @{bin}/uname        rPx,

apparmor.d/groups/kde/startplasma

@@ -21,7 +21,7 @@ profile startplasma @{exec_path} {
 
   @{sh_path}                rix,
   @{bin}/env                rix,
-  @{bin}/grep               rix,
+  @{bin}/{,e}grep           rix,
   @{bin}/kapplymousetheme  rPUx,
   @{bin}/kdeinit5_shutdown rPUx,
   @{bin}/ksplashqml        rPUx,

apparmor.d/groups/network/nm-dispatcher

@@ -42,7 +42,7 @@ profile nm-dispatcher @{exec_path} flags=(attach_disconnected) {
   @{bin}/chronyc           rPUx,
   @{bin}/date               rix,
   @{bin}/gawk               rix,
-  @{bin}/grep               rix,
+  @{bin}/{,e}grep           rix,
   @{bin}/id                 rix,
   @{sbin}/invoke-rc.d       rCx -> invoke-rc,
   @{bin}/logger             rix,

apparmor.d/groups/pacman/aurpublish

@@ -30,7 +30,7 @@ profile aurpublish @{exec_path} {
   @{bin}/gettext     rix,
   @{bin}/git         rPx,
   @{bin}/gpg{,2}     rCx -> gpg,
-  @{bin}/grep        rix,
+  @{bin}/{,e}grep    rix,
   @{bin}/makepkg     rix,
   @{bin}/mkdir       rix,
   @{bin}/mktemp      rix,

apparmor.d/groups/pacman/pacman-key

@@ -22,7 +22,7 @@ profile pacman-key @{exec_path} {
   @{bin}/chmod        rix,
   @{bin}/gettext      rix,
   @{bin}/gpg{,2}      rCx -> gpg,
-  @{bin}/grep         rix,
+  @{bin}/{,e}grep     rix,
   @{bin}/ngettext     rix,
   @{bin}/pacman-conf  rPx,
   @{bin}/touch        rix,

apparmor.d/groups/ssh/ssh-agent-launch

@@ -15,7 +15,7 @@ profile ssh-agent-launch @{exec_path} {
   @{sh_path}            rix,
   @{bin}/dbus-update-activation-environment  rCx -> dbus,
   @{bin}/getopt         rix,
-  @{bin}/grep           rix,
+  @{bin}/{,e}grep       rix,
   @{bin}/ssh-agent      rPx,
 
   /etc/X11/Xsession.options r,

apparmor.d/groups/systemd-generators/systemd-generator-ds-identify

@@ -17,7 +17,7 @@ profile systemd-generator-ds-identify @{exec_path} flags=(attach_disconnected) {
   @{exec_path} mr,
 
   @{sh_path}                     rix,
-  @{bin}/grep                    rix,
+  @{bin}/{,e}grep                rix,
   @{bin}/systemd-detect-virt     rPx,
   @{bin}/tr                      rix,
   @{bin}/uname                   rix,

apparmor.d/groups/systemd-service/grub-common.service

@@ -14,7 +14,7 @@ profile grub-common.service {
   include <abstractions/base>
 
   @{sh_path}           rix,
-  @{bin}/grep           ix,
+  @{bin}/{,e}grep       ix,
   @{bin}/grub-editenv  rix,
   @{bin}/mkdir          ix,
   @{bin}/rm             ix,

apparmor.d/groups/systemd/systemd-sleep-grub

@@ -14,7 +14,7 @@ profile systemd-sleep-grub @{exec_path} {
   @{exec_path} mr,
 
   @{sh_path}              rix,
-  @{bin}/grep             rix,
+  @{bin}/{,e}grep         rix,
   @{bin}/uname            rix,
 
   /etc/sysconfig/bootloader r,

apparmor.d/groups/ubuntu/cron-ubuntu-fan

@@ -16,7 +16,7 @@ profile cron-ubuntu-fan @{exec_path} {
 
   @{sh_path}         rix,
   @{sbin}/fanctl     rPx,
-  @{bin}/grep        rix,
+  @{bin}/{,e}grep    rix,
   @{bin}/ip          rix,
   @{bin}/mkdir       rix,
   @{bin}/sed         rix,

apparmor.d/groups/ubuntu/subiquity-console-conf

@@ -24,7 +24,7 @@ profile subiquity-console-conf @{exec_path} {
 
   @{sh_path}         rix,
   @{bin}/cat         rix,
-  @{bin}/grep        rix,
+  @{bin}/{,e}grep    rix,
   @{bin}/ip          rix,
   @{bin}/mkdir       rix,
   @{bin}/mv          rix,

apparmor.d/groups/ubuntu/ubuntu-fan-net

@@ -14,7 +14,7 @@ profile ubuntu-fan-net @{exec_path} {
 
   @{sh_path}        mr,
   @{bin}/{m,g,}awk  ix,
-  @{bin}/grep       ix,
+  @{bin}/{,e}grep   ix,
   @{bin}/networkctl Px,
   @{sbin}/fanctl    Px,
 

apparmor.d/groups/ubuntu/update-motd-fsck-at-reboot

@@ -18,7 +18,7 @@ profile update-motd-fsck-at-reboot @{exec_path} {
   @{bin}/cat           rix,
   @{bin}/cut           rix,
   @{bin}/date          rix,
-  @{bin}/grep          rix,
+  @{bin}/{,e}grep      rix,
   @{bin}/id            rix,
   @{bin}/mount         rCx -> mount,
   @{bin}/stat          rix,

apparmor.d/groups/whonix/anondate

@@ -19,7 +19,7 @@ profile anondate @{exec_path} {
   @{bin}/cat rix,
   @{bin}/cp rix,
   @{bin}/date rix,
-  @{bin}/grep rix,
+  @{bin}/{,e}grep rix,
   @{bin}/minimum-unixtime-show rix,
   @{bin}/rm rix,
   @{bin}/systemd-cat rix,

apparmor.d/groups/whonix/pam-info

@@ -15,7 +15,7 @@ profile pam-info @{exec_path} {
 
   @{sh_path}          rix,
   @{sbin}/faillock    rix,
-  @{bin}/grep         rix,
+  @{bin}/{,e}grep     rix,
   @{bin}/str_replace  rix,
   @{bin}/wc           rix,
   @{bin}/whoami       rix,

apparmor.d/groups/whonix/rads

@@ -20,7 +20,7 @@ profile rads @{exec_path} {
   @{bin}/chvt       rix,
   @{bin}/free       rix,
   @{bin}/gawk       rix,
-  @{bin}/grep       rix,
+  @{bin}/{,e}grep   rix,
   @{bin}/mkdir      rix,
   @{bin}/rm         rix,
   @{bin}/sed        rix,

apparmor.d/groups/whonix/sdwdate

@@ -30,7 +30,7 @@ profile sdwdate @{exec_path} flags=(attach_disconnected) {
   @{bin}/touch                          rix,
   @{lib}/helper-scripts/*               rix,
   @{bin}/url_to_unixtime                rix,
-  @{bin}/grep rix,
+  @{bin}/{,e}grep rix,
 
   @{lib}/helper-scripts/ r,
   @{lib}/sdwdate/ r,

apparmor.d/groups/whonix/systemcheck-canary

@@ -14,7 +14,7 @@ profile systemcheck-canary @{exec_path} {
   @{exec_path} mr,
 
   @{bin}/sleep rix,
-  @{bin}/grep rix,
+  @{bin}/{,e}grep rix,
   @{bin}/whoami rix,
   @{bin}/cat rix,
   @{bin}/date rix,

apparmor.d/groups/whonix/torbrowser-wrapper

@@ -20,7 +20,7 @@ profile torbrowser-wrapper @{exec_path} {
   @{bin}/basename                 ix,
   @{bin}/cp                       ix,
   @{bin}/dirname                  ix,
-  @{bin}/grep                     ix,
+  @{bin}/{,e}grep                 ix,
   @{bin}/id                       ix,
   @{bin}/mkdir                    ix,
   @{bin}/mktemp                   ix,

apparmor.d/profiles-a-f/blkdeactivate

@@ -16,7 +16,7 @@ profile blkdeactivate @{exec_path} flags=(complain) {
 
   @{sh_path}             rix,
   @{sbin}/dmsetup        rPUx,
-  @{bin}/grep            rix,
+  @{bin}/{,e}grep        rix,
   @{bin}/touch           rix,
   @{bin}/lsblk           rPx,
   @{sbin}/lvm            rPx,

apparmor.d/profiles-a-f/ddcutil

@@ -21,7 +21,7 @@ profile ddcutil @{exec_path} {
   @{bin}/find              rix,
   @{bin}/sed               rix,
   @{bin}/xargs             rix,
-  @{bin}/grep              rix,
+  @{bin}/{,e}grep          rix,
 
   / r,
 

apparmor.d/profiles-a-f/finalrd

@@ -24,7 +24,7 @@ profile finalrd @{exec_path} {
   @{bin}/dirname            ix,
   @{bin}/env                ix,
   @{bin}/find               ix,
-  @{bin}/grep               ix,
+  @{bin}/{,e}grep           ix,
   @{bin}/ln                 ix,
   @{bin}/mkdir              ix,
   @{bin}/mount              ix,

apparmor.d/profiles-g-l/gpu-manager

@@ -17,7 +17,7 @@ profile gpu-manager @{exec_path} {
   @{exec_path} mr,
 
   @{sh_path}   rix,
-  @{bin}/grep  rix,
+  @{bin}/{,e}grep  rix,
 
   /etc/modprobe.d/{,**} r,
   /usr/lib/modprobe.d/{,**} r,

apparmor.d/profiles-g-l/install-catalog

@@ -16,7 +16,7 @@ profile install-catalog @{exec_path} {
 
   @{sh_path}       rix,
   @{bin}/basename  rix,
-  @{bin}/grep      rix,
+  @{bin}/{,e}grep  rix,
   @{bin}/mv        rix,
   @{bin}/rm        rix,
   @{bin}/sed       rix,

apparmor.d/profiles-g-l/kdump-config

@@ -25,7 +25,7 @@ profile kdump-config @{exec_path} flags=(attach_disconnected) {
   @{bin}/file       ix,
   @{bin}/find       ix,
   @{bin}/flock      ix,
-  @{bin}/grep       ix,
+  @{bin}/{,e}grep   ix,
   @{bin}/hexdump    ix,
   @{bin}/ln         ix,
   @{bin}/logger     ix,

apparmor.d/profiles-g-l/landscape-sysinfo.wrapper

@@ -25,7 +25,7 @@ profile landscape-sysinfo.wrapper @{exec_path} {
   @{bin}/cut                rix,
   @{bin}/date               rix,
   @{bin}/find               rix,
-  @{bin}/grep               rix,
+  @{bin}/{,e}grep           rix,
   @{bin}/landscape-sysinfo  rPx,
 
   / r,

apparmor.d/profiles-g-l/language-validate

@@ -15,7 +15,7 @@ profile language-validate @{exec_path} flags=(attach_disconnected) {
   @{exec_path} mrix,
 
   @{sh_path}         rix,
-  @{bin}/grep        rix,
+  @{bin}/{,e}grep    rix,
   @{bin}/locale      rix,
 
   /usr/share/locale-langpack/{,*} r,

apparmor.d/profiles-g-l/libreoffice

@@ -43,7 +43,7 @@ profile libreoffice @{exec_path} {
   @{sh_path}        rix,
   @{bin}/basename   rix,
   @{bin}/dirname    rix,
-  @{bin}/grep       rix,
+  @{bin}/{,e}grep   rix,
   @{bin}/ls         rix,
   @{bin}/paperconf  rix,
   @{bin}/sed        rix,

apparmor.d/profiles-g-l/logrotate

@@ -30,7 +30,7 @@ profile logrotate @{exec_path} flags=(attach_disconnected) {
 
   @{sh_path}                    rix,
   @{bin}/cat                    rix,
-  @{bin}/grep                   rix,
+  @{bin}/{,e}grep               rix,
   @{bin}/gzip                   rix,
   @{sbin}/invoke-rc.d           rix,
   @{bin}/kill                   rix,

apparmor.d/profiles-m-r/modprobed-db

@@ -19,7 +19,7 @@ profile modprobed-db @{exec_path} {
   @{bin}/cut           rix,
   @{bin}/gawk          rix,
   @{bin}/getent        rix,
-  @{bin}/grep          rix,
+  @{bin}/{,e}grep      rix,
   @{bin}/logname       rix,
   @{bin}/md5sum        rix,
   @{bin}/rm            rix,

apparmor.d/profiles-m-r/needrestart-vmlinuz-get-version

@@ -15,7 +15,7 @@ profile needrestart-vmlinuz-get-version @{exec_path} {
 
   @{sh_path}                   rix,
   @{bin}/bzip2                 rix,
-  @{bin}/grep                  rix,
+  @{bin}/{,e}grep              rix,
   @{bin}/gunzip                rix,
   @{bin}/gzip                  rix,
   @{bin}/lzop                  rix,

apparmor.d/profiles-m-r/pass

@@ -24,7 +24,7 @@ profile pass @{exec_path} {
   @{bin}/env           r,
   @{bin}/find         ix,
   @{bin}/getopt       ix,
-  @{bin}/grep         ix,
+  @{bin}/{,e}grep     ix,
   @{bin}/head         ix,
   @{bin}/mkdir        ix,
   @{bin}/mktemp       ix,

apparmor.d/profiles-s-z/secure-time-sync

@@ -23,7 +23,7 @@ profile secure-time-sync @{exec_path} flags=(attach_disconnected) {
   @{sh_path}         rix,
   @{bin}/curl        rix,
   @{bin}/date        rix,
-  @{bin}/grep        rix,
+  @{bin}/{,e}grep    rix,
   @{bin}/id          rPx,
   @{bin}/sed         rix,
 

apparmor.d/profiles-s-z/spotify

@@ -28,7 +28,7 @@ profile spotify @{exec_path} flags=(attach_disconnected) {
   @{exec_path} mrix,
 
   @{sh_path} mr,
-  @{bin}/grep rix,
+  @{bin}/{,e}grep rix,
 
   @{open_path}     rPx -> child-open-strict,
 

apparmor.d/profiles-s-z/syncoid

@@ -15,7 +15,7 @@ profile syncoid @{exec_path} flags=(complain) {
   @{exec_path} mr,
 
   @{sh_path}                     rix,
-  @{bin}/grep                    rix,
+  @{bin}/{,e}grep                rix,
   @{bin}/mbuffer                 rix,
   @{bin}/perl                    rix,
   @{bin}/ps                      rPx,

apparmor.d/profiles-s-z/sysstat-sa

@@ -17,7 +17,7 @@ profile sysstat-sa @{exec_path} {
   @{sh_path}          rix,
   @{bin}/date          ix,
   @{bin}/find          ix,
-  @{bin}/grep          ix,
+  @{bin}/{,e}grep      ix,
   @{bin}/rm            ix,
   @{bin}/sar.sysstat   ix,
   @{bin}/xargs         ix,

apparmor.d/profiles-s-z/tlp

@@ -32,7 +32,7 @@ profile tlp @{exec_path} flags=(attach_disconnected) {
   @{bin}/cp                     rix,
   @{sbin}/ethtool               rix,
   @{bin}/flock                  rix,
-  @{bin}/grep                   rix,
+  @{bin}/{,e}grep               rix,
   @{sbin}/hdparm                rPx,
   @{bin}/head                   rix,
   @{bin}/id                     rPx,

apparmor.d/profiles-s-z/ucfr

@@ -16,7 +16,7 @@ profile ucfr @{exec_path} {
   @{bin}/basename               ix,
   @{bin}/{m,g,}awk              ix,
   @{bin}/getopt                 ix,
-  @{bin}/grep                   ix,
+  @{bin}/{,e}grep               ix,
   @{bin}/id                     ix,
   @{bin}/readlink               ix,
   @{bin}/sed                    ix,

apparmor.d/profiles-s-z/update-cracklib

@@ -21,7 +21,7 @@ profile update-cracklib @{exec_path} {
   @{bin}/env                  rix,
   @{bin}/file                 rix,
   @{bin}/find                 rix,
-  @{bin}/grep                 rix,
+  @{bin}/{,e}grep             rix,
   @{bin}/gzip                 rix,
   @{bin}/install              rix,
   @{bin}/install              rix,

apparmor.d/profiles-s-z/veracrypt

@@ -30,7 +30,7 @@ profile veracrypt @{exec_path} {
   @{sh_path}       rix,
   @{open_path}     rPx -> child-open-help,
   @{sbin}/dmsetup   rPx,
-  @{bin}/grep      rix,
+  @{bin}/{,e}grep  rix,
   @{bin}/kmod      rix,
   @{sbin}/ldconfig  rix,
   @{sbin}/losetup   rCx -> losetup,

apparmor.d/profiles-s-z/whatis

@@ -13,7 +13,7 @@ profile whatis @{exec_path} {
   include <abstractions/consoles>
 
   @{exec_path} mr,
-  @{bin}/grep  rix,
+  @{bin}/{,e}grep  rix,
 
   /usr/{,**/}man/{,**/}{,whatis} r,
 

apparmor.d/profiles-s-z/zed

@@ -23,7 +23,7 @@ profile zed @{exec_path} {
   @{bin}/diff rix,
   @{bin}/expr rix,
   @{bin}/flock rix,
-  @{bin}/grep rix,
+  @{bin}/{,e}grep rix,
   @{bin}/hostname rix,
   @{bin}/logger rix,
   @{bin}/ls rix,