feat(profile): add pgrep.

apparmor.d/groups/procps/pgrep

@@ -0,0 +1,22 @@
+# apparmor.d - Full set of apparmor profiles
+# Copyright (C) 2025 Alexandre Pujol <alexandre@pujol.io>
+# SPDX-License-Identifier: GPL-2.0-only
+
+abi <abi/4.0>,
+
+include <tunables/global>
+
+@{exec_path} = @{bin}/pgrep
+profile pgrep @{exec_path} {
+  include <abstractions/base>
+  include <abstractions/app/pgrep>
+  include <abstractions/nameservice-strict>
+
+  @{exec_path} mr,
+
+  @{PROC}/tty/drivers r,
+
+  include if exists <local/pgrep>
+}
+
+# vim:syntax=apparmor

tests/integration/procps/pgrep.bats

@@ -0,0 +1,19 @@
+#!/usr/bin/env bats
+# apparmor.d - Full set of apparmor profiles
+# Copyright (C) 2025 Alexandre Pujol <alexandre@pujol.io>
+# SPDX-License-Identifier: GPL-2.0-only
+
+load ../common
+
+@test "pgrep: Return PIDs of any running processes with a matching command string" {
+    pgrep systemd
+}
+
+@test "pgrep: Search for processes including their command-line options" {
+    pgrep --full 'systemd'
+}
+
+@test "pgrep: Search for processes run by a specific user" {
+    pgrep --euid root systemd-udevd
+}
+