#include <tunables/global>
/usr/lib/nagios/plugins/check_procs flags=(attach_disconnected) {
  #include <abstractions/nameservice>
  #include <abstractions/base>
  #include <abstractions/consoles>

  ptrace,
  ptrace (read) peer=unconfined,

  /{usr/,}bin/ps rix,
  /proc/ r,
  /proc/** r,
  /usr/lib/nagios/plugins/check_procs mr,
}