feat(profiles): ensure we use {,e}grep instead of grep.

2025-06-19 23:07:17 +02:00 · 2025-06-19 23:07:17 +02:00 · d2dbf771cc
commit d2dbf771cc
parent 0e4cc45a5b
55 changed files with 55 additions and 55 deletions
--- a/apparmor.d/groups/apt/apt-systemd-daily
+++ b/apparmor.d/groups/apt/apt-systemd-daily
@ -25,7 +25,7 @@ profile apt-systemd-daily @{exec_path} {
  @{bin}/env        rix,
  @{bin}/find       rix,
  @{bin}/flock      rix,
-  @{bin}/grep       rix,
+  @{bin}/{,e}grep   rix,
  @{bin}/gzip       rix,
  @{bin}/ls         rix,
  @{bin}/mv         rix,
--- a/apparmor.d/groups/apt/dpkg-script-apparmor
+++ b/apparmor.d/groups/apt/dpkg-script-apparmor
@ -13,7 +13,7 @@ profile dpkg-script-apparmor @{exec_path} {

  @{exec_path} mrix,

-  @{bin}/grep   ix,
+  @{bin}/{,e}grep   ix,

  @{bin}/deb-systemd-helper  Px,
  @{bin}/deb-systemd-invoke  Px,
--- a/apparmor.d/groups/browsers/torbrowser-launcher
+++ b/apparmor.d/groups/browsers/torbrowser-launcher
@ -32,7 +32,7 @@ profile torbrowser-launcher @{exec_path} flags=(attach_disconnected) {
  @{bin}/gpg{,2}   Cx -> gpg,
  @{bin}/gpgconf   Cx -> gpg,
  @{bin}/gpgsm     Cx -> gpg,
-  @{bin}/grep      ix,
+  @{bin}/{,e}grep  ix,
  @{bin}/sed       ix,
  @{bin}/tail      ix,

--- a/apparmor.d/groups/browsers/torbrowser-start
+++ b/apparmor.d/groups/browsers/torbrowser-start
@ -22,7 +22,7 @@ profile torbrowser-start @{exec_path} {
  @{bin}/expr                  ix,
  @{bin}/file                  ix,
  @{bin}/getconf               ix,
-  @{bin}/grep                  ix,
+  @{bin}/{,e}grep              ix,
  @{bin}/id                    ix,
  @{bin}/ln                    ix,
  @{bin}/mkdir                 ix,
--- a/apparmor.d/groups/cron/cron-ntp
+++ b/apparmor.d/groups/cron/cron-ntp
@ -14,7 +14,7 @@ profile cron-ntp @{exec_path} {

  @{sh_path}     rix,
  @{bin}/cat     rix,
-  @{bin}/grep    rix,
+  @{bin}/{,e}grep  rix,
  @{bin}/sed     rix,

  include if exists <local/cron-ntp>
--- a/apparmor.d/groups/cron/cron-popularity-contest
+++ b/apparmor.d/groups/cron/cron-popularity-contest
@ -18,7 +18,7 @@ profile cron-popularity-contest @{exec_path} {

  @{bin}/cat                 rix,
  @{bin}/date                rix,
-  @{bin}/grep                rix,
+  @{bin}/{,e}grep            rix,
  @{bin}/logger              rix,
  @{bin}/mkdir               rix,
  @{bin}/mktemp              rix,
--- a/apparmor.d/groups/cups/cupsd
+++ b/apparmor.d/groups/cups/cupsd
@ -50,7 +50,7 @@ profile cupsd @{exec_path} flags=(attach_disconnected) {
  @{bin}/cat                 rix,
  @{bin}/chmod               rix,
  @{bin}/cp                  rix,
-  @{bin}/grep                rix,
+  @{bin}/{,e}grep            rix,
  @{bin}/gs                  rix,
  @{bin}/gsc                 rix,
  @{bin}/hostname            rix,
--- a/apparmor.d/groups/display-manager/xdm-xsession
+++ b/apparmor.d/groups/display-manager/xdm-xsession
@ -25,7 +25,7 @@ profile xdm-xsession @{exec_path} {
  @{bin}/fortune           rPUx,
  @{bin}/gpg-agent          rPx,
  @{bin}/gpg-connect-agent  rPx,
-  @{bin}/grep               rix,
+  @{bin}/{,e}grep           rix,
  @{bin}/locale             rix,
  @{bin}/manpath            rix,
  @{bin}/readlink           rix,
--- a/apparmor.d/groups/filesystem/lvmpolld
+++ b/apparmor.d/groups/filesystem/lvmpolld
@ -13,7 +13,7 @@ profile lvmpolld @{exec_path} {
  include <abstractions/nameservice-strict>

  @{exec_path} rm,
-  @{bin}/grep rix,
+  @{bin}/{,e}grep rix,
  @{bin}/umount rPx,

  @{run}/lvmpolld.pid rwk,
--- a/apparmor.d/groups/freedesktop/plymouth-set-default-theme
+++ b/apparmor.d/groups/freedesktop/plymouth-set-default-theme
@ -15,7 +15,7 @@ profile plymouth-set-default-theme @{exec_path} flags=(attach_disconnected) {

  @{sh_path}         rix,
  @{bin}/{m,g,}awk   rix,
-  @{bin}/grep        rix,
+  @{bin}/{,e}grep    rix,
  @{bin}/plymouth    rPx,

  /usr/share/plymouth/{,**} r,
--- a/apparmor.d/groups/gnome/gnome-control-center
+++ b/apparmor.d/groups/gnome/gnome-control-center
@ -67,7 +67,7 @@ profile gnome-control-center @{exec_path} flags=(attach_disconnected) {
  @{bin}/@{shells}     rUx,

  @{bin}/gcm-viewer    rix,
-  @{bin}/grep          rix,
+  @{bin}/{,e}grep      rix,
  @{bin}/locale        rix,
  @{bin}/sed           rix,
  @{bin}/tecla         rPx,
--- a/apparmor.d/groups/gnome/gnome-session
+++ b/apparmor.d/groups/gnome/gnome-session
@ -20,7 +20,7 @@ profile gnome-session @{exec_path} {
  @{bin}/find                  rix,
  @{bin}/gettext               rix,
  @{bin}/gettext.sh              r,
-  @{bin}/grep                  rix,
+  @{bin}/{,e}grep              rix,
  @{bin}/head                  rix,
  @{bin}/id                    rix,
  @{bin}/locale                rix,
--- a/apparmor.d/groups/gnome/gnome-shell
+++ b/apparmor.d/groups/gnome/gnome-shell
@ -388,7 +388,7 @@ profile gnome-shell @{exec_path} flags=(attach_disconnected,mediate_deleted) {
    @{sh_path} mr,

    @{bin}/cat   rix,
-    @{bin}/grep  rix,
+    @{bin}/{,e}grep  rix,
    @{bin}/kmod  rPx -> gnome-shell//lsmod,
    @{bin}/pmap  rix,

--- a/apparmor.d/groups/kde/kde-powerdevil
+++ b/apparmor.d/groups/kde/kde-powerdevil
@ -24,7 +24,7 @@ profile kde-powerdevil @{exec_path} flags=(attach_disconnected mediate_deleted)

  @{sh_path}          rix,
  @{bin}/find         rix,
-  @{bin}/grep         rix,
+  @{bin}/{,e}grep     rix,
  @{bin}/kcminit      rPx,
  @{bin}/sed          rix,
  @{bin}/uname        rPx,
--- a/apparmor.d/groups/kde/startplasma
+++ b/apparmor.d/groups/kde/startplasma
@ -21,7 +21,7 @@ profile startplasma @{exec_path} {

  @{sh_path}                rix,
  @{bin}/env                rix,
-  @{bin}/grep               rix,
+  @{bin}/{,e}grep           rix,
  @{bin}/kapplymousetheme  rPUx,
  @{bin}/kdeinit5_shutdown rPUx,
  @{bin}/ksplashqml        rPUx,
--- a/apparmor.d/groups/network/nm-dispatcher
+++ b/apparmor.d/groups/network/nm-dispatcher
@ -42,7 +42,7 @@ profile nm-dispatcher @{exec_path} flags=(attach_disconnected) {
  @{bin}/chronyc           rPUx,
  @{bin}/date               rix,
  @{bin}/gawk               rix,
-  @{bin}/grep               rix,
+  @{bin}/{,e}grep           rix,
  @{bin}/id                 rix,
  @{sbin}/invoke-rc.d       rCx -> invoke-rc,
  @{bin}/logger             rix,
--- a/apparmor.d/groups/pacman/aurpublish
+++ b/apparmor.d/groups/pacman/aurpublish
@ -30,7 +30,7 @@ profile aurpublish @{exec_path} {
  @{bin}/gettext     rix,
  @{bin}/git         rPx,
  @{bin}/gpg{,2}     rCx -> gpg,
-  @{bin}/grep        rix,
+  @{bin}/{,e}grep    rix,
  @{bin}/makepkg     rix,
  @{bin}/mkdir       rix,
  @{bin}/mktemp      rix,
--- a/apparmor.d/groups/pacman/pacman-key
+++ b/apparmor.d/groups/pacman/pacman-key
@ -22,7 +22,7 @@ profile pacman-key @{exec_path} {
  @{bin}/chmod        rix,
  @{bin}/gettext      rix,
  @{bin}/gpg{,2}      rCx -> gpg,
-  @{bin}/grep         rix,
+  @{bin}/{,e}grep     rix,
  @{bin}/ngettext     rix,
  @{bin}/pacman-conf  rPx,
  @{bin}/touch        rix,
--- a/apparmor.d/groups/ssh/ssh-agent-launch
+++ b/apparmor.d/groups/ssh/ssh-agent-launch
@ -15,7 +15,7 @@ profile ssh-agent-launch @{exec_path} {
  @{sh_path}            rix,
  @{bin}/dbus-update-activation-environment  rCx -> dbus,
  @{bin}/getopt         rix,
-  @{bin}/grep           rix,
+  @{bin}/{,e}grep       rix,
  @{bin}/ssh-agent      rPx,

  /etc/X11/Xsession.options r,
--- a/apparmor.d/groups/systemd-generators/systemd-generator-ds-identify
+++ b/apparmor.d/groups/systemd-generators/systemd-generator-ds-identify
@ -17,7 +17,7 @@ profile systemd-generator-ds-identify @{exec_path} flags=(attach_disconnected) {
  @{exec_path} mr,

  @{sh_path}                     rix,
-  @{bin}/grep                    rix,
+  @{bin}/{,e}grep                rix,
  @{bin}/systemd-detect-virt     rPx,
  @{bin}/tr                      rix,
  @{bin}/uname                   rix,
--- a/apparmor.d/groups/systemd-service/grub-common.service
+++ b/apparmor.d/groups/systemd-service/grub-common.service
@ -14,7 +14,7 @@ profile grub-common.service {
  include <abstractions/base>

  @{sh_path}           rix,
-  @{bin}/grep           ix,
+  @{bin}/{,e}grep       ix,
  @{bin}/grub-editenv  rix,
  @{bin}/mkdir          ix,
  @{bin}/rm             ix,
--- a/apparmor.d/groups/systemd/systemd-sleep-grub
+++ b/apparmor.d/groups/systemd/systemd-sleep-grub
@ -14,7 +14,7 @@ profile systemd-sleep-grub @{exec_path} {
  @{exec_path} mr,

  @{sh_path}              rix,
-  @{bin}/grep             rix,
+  @{bin}/{,e}grep         rix,
  @{bin}/uname            rix,

  /etc/sysconfig/bootloader r,
--- a/apparmor.d/groups/ubuntu/cron-ubuntu-fan
+++ b/apparmor.d/groups/ubuntu/cron-ubuntu-fan
@ -16,7 +16,7 @@ profile cron-ubuntu-fan @{exec_path} {

  @{sh_path}         rix,
  @{sbin}/fanctl     rPx,
-  @{bin}/grep        rix,
+  @{bin}/{,e}grep    rix,
  @{bin}/ip          rix,
  @{bin}/mkdir       rix,
  @{bin}/sed         rix,
--- a/apparmor.d/groups/ubuntu/subiquity-console-conf
+++ b/apparmor.d/groups/ubuntu/subiquity-console-conf
@ -24,7 +24,7 @@ profile subiquity-console-conf @{exec_path} {

  @{sh_path}         rix,
  @{bin}/cat         rix,
-  @{bin}/grep        rix,
+  @{bin}/{,e}grep    rix,
  @{bin}/ip          rix,
  @{bin}/mkdir       rix,
  @{bin}/mv          rix,
--- a/apparmor.d/groups/ubuntu/ubuntu-fan-net
+++ b/apparmor.d/groups/ubuntu/ubuntu-fan-net
@ -14,7 +14,7 @@ profile ubuntu-fan-net @{exec_path} {

  @{sh_path}        mr,
  @{bin}/{m,g,}awk  ix,
-  @{bin}/grep       ix,
+  @{bin}/{,e}grep   ix,
  @{bin}/networkctl Px,
  @{sbin}/fanctl    Px,

--- a/apparmor.d/groups/ubuntu/update-motd-fsck-at-reboot
+++ b/apparmor.d/groups/ubuntu/update-motd-fsck-at-reboot
@ -18,7 +18,7 @@ profile update-motd-fsck-at-reboot @{exec_path} {
  @{bin}/cat           rix,
  @{bin}/cut           rix,
  @{bin}/date          rix,
-  @{bin}/grep          rix,
+  @{bin}/{,e}grep      rix,
  @{bin}/id            rix,
  @{bin}/mount         rCx -> mount,
  @{bin}/stat          rix,
--- a/apparmor.d/groups/whonix/anondate
+++ b/apparmor.d/groups/whonix/anondate
@ -19,7 +19,7 @@ profile anondate @{exec_path} {
  @{bin}/cat rix,
  @{bin}/cp rix,
  @{bin}/date rix,
-  @{bin}/grep rix,
+  @{bin}/{,e}grep rix,
  @{bin}/minimum-unixtime-show rix,
  @{bin}/rm rix,
  @{bin}/systemd-cat rix,
--- a/apparmor.d/groups/whonix/pam-info
+++ b/apparmor.d/groups/whonix/pam-info
@ -15,7 +15,7 @@ profile pam-info @{exec_path} {

  @{sh_path}          rix,
  @{sbin}/faillock    rix,
-  @{bin}/grep         rix,
+  @{bin}/{,e}grep     rix,
  @{bin}/str_replace  rix,
  @{bin}/wc           rix,
  @{bin}/whoami       rix,
--- a/apparmor.d/groups/whonix/rads
+++ b/apparmor.d/groups/whonix/rads
@ -20,7 +20,7 @@ profile rads @{exec_path} {
  @{bin}/chvt       rix,
  @{bin}/free       rix,
  @{bin}/gawk       rix,
-  @{bin}/grep       rix,
+  @{bin}/{,e}grep   rix,
  @{bin}/mkdir      rix,
  @{bin}/rm         rix,
  @{bin}/sed        rix,
--- a/apparmor.d/groups/whonix/sdwdate
+++ b/apparmor.d/groups/whonix/sdwdate
@ -30,7 +30,7 @@ profile sdwdate @{exec_path} flags=(attach_disconnected) {
  @{bin}/touch                          rix,
  @{lib}/helper-scripts/*               rix,
  @{bin}/url_to_unixtime                rix,
-  @{bin}/grep rix,
+  @{bin}/{,e}grep rix,

  @{lib}/helper-scripts/ r,
  @{lib}/sdwdate/ r,
--- a/apparmor.d/groups/whonix/systemcheck-canary
+++ b/apparmor.d/groups/whonix/systemcheck-canary
@ -14,7 +14,7 @@ profile systemcheck-canary @{exec_path} {
  @{exec_path} mr,

  @{bin}/sleep rix,
-  @{bin}/grep rix,
+  @{bin}/{,e}grep rix,
  @{bin}/whoami rix,
  @{bin}/cat rix,
  @{bin}/date rix,
--- a/apparmor.d/groups/whonix/torbrowser-wrapper
+++ b/apparmor.d/groups/whonix/torbrowser-wrapper
@ -20,7 +20,7 @@ profile torbrowser-wrapper @{exec_path} {
  @{bin}/basename                 ix,
  @{bin}/cp                       ix,
  @{bin}/dirname                  ix,
-  @{bin}/grep                     ix,
+  @{bin}/{,e}grep                 ix,
  @{bin}/id                       ix,
  @{bin}/mkdir                    ix,
  @{bin}/mktemp                   ix,
--- a/apparmor.d/profiles-a-f/blkdeactivate
+++ b/apparmor.d/profiles-a-f/blkdeactivate
@ -16,7 +16,7 @@ profile blkdeactivate @{exec_path} flags=(complain) {

  @{sh_path}             rix,
  @{sbin}/dmsetup        rPUx,
-  @{bin}/grep            rix,
+  @{bin}/{,e}grep        rix,
  @{bin}/touch           rix,
  @{bin}/lsblk           rPx,
  @{sbin}/lvm            rPx,
--- a/apparmor.d/profiles-a-f/ddcutil
+++ b/apparmor.d/profiles-a-f/ddcutil
@ -21,7 +21,7 @@ profile ddcutil @{exec_path} {
  @{bin}/find              rix,
  @{bin}/sed               rix,
  @{bin}/xargs             rix,
-  @{bin}/grep              rix,
+  @{bin}/{,e}grep          rix,

  / r,

--- a/apparmor.d/profiles-a-f/finalrd
+++ b/apparmor.d/profiles-a-f/finalrd
@ -24,7 +24,7 @@ profile finalrd @{exec_path} {
  @{bin}/dirname            ix,
  @{bin}/env                ix,
  @{bin}/find               ix,
-  @{bin}/grep               ix,
+  @{bin}/{,e}grep           ix,
  @{bin}/ln                 ix,
  @{bin}/mkdir              ix,
  @{bin}/mount              ix,
--- a/apparmor.d/profiles-g-l/gpu-manager
+++ b/apparmor.d/profiles-g-l/gpu-manager
@ -17,7 +17,7 @@ profile gpu-manager @{exec_path} {
  @{exec_path} mr,

  @{sh_path}   rix,
-  @{bin}/grep  rix,
+  @{bin}/{,e}grep  rix,

  /etc/modprobe.d/{,**} r,
  /usr/lib/modprobe.d/{,**} r,
--- a/apparmor.d/profiles-g-l/install-catalog
+++ b/apparmor.d/profiles-g-l/install-catalog
@ -16,7 +16,7 @@ profile install-catalog @{exec_path} {

  @{sh_path}       rix,
  @{bin}/basename  rix,
-  @{bin}/grep      rix,
+  @{bin}/{,e}grep  rix,
  @{bin}/mv        rix,
  @{bin}/rm        rix,
  @{bin}/sed       rix,
--- a/apparmor.d/profiles-g-l/kdump-config
+++ b/apparmor.d/profiles-g-l/kdump-config
@ -25,7 +25,7 @@ profile kdump-config @{exec_path} flags=(attach_disconnected) {
  @{bin}/file       ix,
  @{bin}/find       ix,
  @{bin}/flock      ix,
-  @{bin}/grep       ix,
+  @{bin}/{,e}grep   ix,
  @{bin}/hexdump    ix,
  @{bin}/ln         ix,
  @{bin}/logger     ix,
--- a/apparmor.d/profiles-g-l/landscape-sysinfo.wrapper
+++ b/apparmor.d/profiles-g-l/landscape-sysinfo.wrapper
@ -25,7 +25,7 @@ profile landscape-sysinfo.wrapper @{exec_path} {
  @{bin}/cut                rix,
  @{bin}/date               rix,
  @{bin}/find               rix,
-  @{bin}/grep               rix,
+  @{bin}/{,e}grep           rix,
  @{bin}/landscape-sysinfo  rPx,

  / r,
--- a/apparmor.d/profiles-g-l/language-validate
+++ b/apparmor.d/profiles-g-l/language-validate
@ -15,7 +15,7 @@ profile language-validate @{exec_path} flags=(attach_disconnected) {
  @{exec_path} mrix,

  @{sh_path}         rix,
-  @{bin}/grep        rix,
+  @{bin}/{,e}grep    rix,
  @{bin}/locale      rix,

  /usr/share/locale-langpack/{,*} r,
--- a/apparmor.d/profiles-g-l/libreoffice
+++ b/apparmor.d/profiles-g-l/libreoffice
@ -43,7 +43,7 @@ profile libreoffice @{exec_path} {
  @{sh_path}        rix,
  @{bin}/basename   rix,
  @{bin}/dirname    rix,
-  @{bin}/grep       rix,
+  @{bin}/{,e}grep   rix,
  @{bin}/ls         rix,
  @{bin}/paperconf  rix,
  @{bin}/sed        rix,
--- a/apparmor.d/profiles-g-l/logrotate
+++ b/apparmor.d/profiles-g-l/logrotate
@ -30,7 +30,7 @@ profile logrotate @{exec_path} flags=(attach_disconnected) {

  @{sh_path}                    rix,
  @{bin}/cat                    rix,
-  @{bin}/grep                   rix,
+  @{bin}/{,e}grep               rix,
  @{bin}/gzip                   rix,
  @{sbin}/invoke-rc.d           rix,
  @{bin}/kill                   rix,
--- a/apparmor.d/profiles-m-r/modprobed-db
+++ b/apparmor.d/profiles-m-r/modprobed-db
@ -19,7 +19,7 @@ profile modprobed-db @{exec_path} {
  @{bin}/cut           rix,
  @{bin}/gawk          rix,
  @{bin}/getent        rix,
-  @{bin}/grep          rix,
+  @{bin}/{,e}grep      rix,
  @{bin}/logname       rix,
  @{bin}/md5sum        rix,
  @{bin}/rm            rix,
--- a/apparmor.d/profiles-m-r/needrestart-vmlinuz-get-version
+++ b/apparmor.d/profiles-m-r/needrestart-vmlinuz-get-version
@ -15,7 +15,7 @@ profile needrestart-vmlinuz-get-version @{exec_path} {

  @{sh_path}                   rix,
  @{bin}/bzip2                 rix,
-  @{bin}/grep                  rix,
+  @{bin}/{,e}grep              rix,
  @{bin}/gunzip                rix,
  @{bin}/gzip                  rix,
  @{bin}/lzop                  rix,
--- a/apparmor.d/profiles-m-r/pass
+++ b/apparmor.d/profiles-m-r/pass
@ -24,7 +24,7 @@ profile pass @{exec_path} {
  @{bin}/env           r,
  @{bin}/find         ix,
  @{bin}/getopt       ix,
-  @{bin}/grep         ix,
+  @{bin}/{,e}grep     ix,
  @{bin}/head         ix,
  @{bin}/mkdir        ix,
  @{bin}/mktemp       ix,
--- a/apparmor.d/profiles-s-z/secure-time-sync
+++ b/apparmor.d/profiles-s-z/secure-time-sync
@ -23,7 +23,7 @@ profile secure-time-sync @{exec_path} flags=(attach_disconnected) {
  @{sh_path}         rix,
  @{bin}/curl        rix,
  @{bin}/date        rix,
-  @{bin}/grep        rix,
+  @{bin}/{,e}grep    rix,
  @{bin}/id          rPx,
  @{bin}/sed         rix,

--- a/apparmor.d/profiles-s-z/spotify
+++ b/apparmor.d/profiles-s-z/spotify
@ -28,7 +28,7 @@ profile spotify @{exec_path} flags=(attach_disconnected) {
  @{exec_path} mrix,

  @{sh_path} mr,
-  @{bin}/grep rix,
+  @{bin}/{,e}grep rix,

  @{open_path}     rPx -> child-open-strict,

--- a/apparmor.d/profiles-s-z/syncoid
+++ b/apparmor.d/profiles-s-z/syncoid
@ -15,7 +15,7 @@ profile syncoid @{exec_path} flags=(complain) {
  @{exec_path} mr,

  @{sh_path}                     rix,
-  @{bin}/grep                    rix,
+  @{bin}/{,e}grep                rix,
  @{bin}/mbuffer                 rix,
  @{bin}/perl                    rix,
  @{bin}/ps                      rPx,
--- a/apparmor.d/profiles-s-z/sysstat-sa
+++ b/apparmor.d/profiles-s-z/sysstat-sa
@ -17,7 +17,7 @@ profile sysstat-sa @{exec_path} {
  @{sh_path}          rix,
  @{bin}/date          ix,
  @{bin}/find          ix,
-  @{bin}/grep          ix,
+  @{bin}/{,e}grep      ix,
  @{bin}/rm            ix,
  @{bin}/sar.sysstat   ix,
  @{bin}/xargs         ix,
--- a/apparmor.d/profiles-s-z/tlp
+++ b/apparmor.d/profiles-s-z/tlp
@ -32,7 +32,7 @@ profile tlp @{exec_path} flags=(attach_disconnected) {
  @{bin}/cp                     rix,
  @{sbin}/ethtool               rix,
  @{bin}/flock                  rix,
-  @{bin}/grep                   rix,
+  @{bin}/{,e}grep               rix,
  @{sbin}/hdparm                rPx,
  @{bin}/head                   rix,
  @{bin}/id                     rPx,
--- a/apparmor.d/profiles-s-z/ucfr
+++ b/apparmor.d/profiles-s-z/ucfr
@ -16,7 +16,7 @@ profile ucfr @{exec_path} {
  @{bin}/basename               ix,
  @{bin}/{m,g,}awk              ix,
  @{bin}/getopt                 ix,
-  @{bin}/grep                   ix,
+  @{bin}/{,e}grep               ix,
  @{bin}/id                     ix,
  @{bin}/readlink               ix,
  @{bin}/sed                    ix,
--- a/apparmor.d/profiles-s-z/update-cracklib
+++ b/apparmor.d/profiles-s-z/update-cracklib
@ -21,7 +21,7 @@ profile update-cracklib @{exec_path} {
  @{bin}/env                  rix,
  @{bin}/file                 rix,
  @{bin}/find                 rix,
-  @{bin}/grep                 rix,
+  @{bin}/{,e}grep             rix,
  @{bin}/gzip                 rix,
  @{bin}/install              rix,
  @{bin}/install              rix,
--- a/apparmor.d/profiles-s-z/veracrypt
+++ b/apparmor.d/profiles-s-z/veracrypt
@ -30,7 +30,7 @@ profile veracrypt @{exec_path} {
  @{sh_path}       rix,
  @{open_path}     rPx -> child-open-help,
  @{sbin}/dmsetup   rPx,
-  @{bin}/grep      rix,
+  @{bin}/{,e}grep  rix,
  @{bin}/kmod      rix,
  @{sbin}/ldconfig  rix,
  @{sbin}/losetup   rCx -> losetup,
--- a/apparmor.d/profiles-s-z/whatis
+++ b/apparmor.d/profiles-s-z/whatis
@ -13,7 +13,7 @@ profile whatis @{exec_path} {
  include <abstractions/consoles>

  @{exec_path} mr,
-  @{bin}/grep  rix,
+  @{bin}/{,e}grep  rix,

  /usr/{,**/}man/{,**/}{,whatis} r,

--- a/apparmor.d/profiles-s-z/zed
+++ b/apparmor.d/profiles-s-z/zed
@ -23,7 +23,7 @@ profile zed @{exec_path} {
  @{bin}/diff rix,
  @{bin}/expr rix,
  @{bin}/flock rix,
-  @{bin}/grep rix,
+  @{bin}/{,e}grep rix,
  @{bin}/hostname rix,
  @{bin}/logger rix,
  @{bin}/ls rix,