diff --git a/apparmor.d/groups/cron/cron b/apparmor.d/groups/cron/cron
index 7d47dc73..21def9d2 100644
--- a/apparmor.d/groups/cron/cron
+++ b/apparmor.d/groups/cron/cron
@@ -102,6 +102,8 @@ profile cron @{exec_path} {
     /etc/cron.{hourly,daily,weekly,monthly}/vrms                rPUx,
     /etc/cron.{hourly,daily,weekly,monthly}/apt-xapian-index     rPx,
     /etc/cron.{hourly,daily,weekly,monthly}/tor                 rPUx,
+    /etc/cron.{hourly,daily,weekly,monthly}/cracklib-runtime     rPx,
+    /etc/cron.{hourly,daily,weekly,monthly}/etckeeper            rPx,
 
     #/etc/cron.{hourly,daily,weekly,monthly}/opera-browser                     rPUx,
     #/etc/cron.{hourly,daily,weekly,monthly}/google-chrome{,-beta,-unstable}   rPUx,
diff --git a/apparmor.d/groups/cron/cron-cracklib b/apparmor.d/groups/cron/cron-cracklib
new file mode 100644
index 00000000..f1218290
--- /dev/null
+++ b/apparmor.d/groups/cron/cron-cracklib
@@ -0,0 +1,23 @@
+# apparmor.d - Full set of apparmor profiles
+# Copyright (C) 2022 Alexandre Pujol <alexandre@pujol.io>
+# SPDX-License-Identifier: GPL-2.0-only
+
+abi <abi/3.0>,
+
+include <tunables/global>
+
+@{exec_path} = /etc/cron.{hourly,daily,weekly,monthly}/cracklib-runtime
+profile cron-cracklib @{exec_path} {
+  include <abstractions/base>
+  include <abstractions/consoles>
+
+  @{exec_path} r,
+  
+  /{usr/,}bin/{,ba,da}sh        rix,
+  /{usr/,}bin/logger            rix,
+  /{usr/,}sbin/update-cracklib  rPx,
+
+  /etc/cracklib/cracklib.conf r,
+
+  include if exists <local/cron-cracklib>
+}
diff --git a/apparmor.d/groups/cron/cron-etckeeper b/apparmor.d/groups/cron/cron-etckeeper
new file mode 100644
index 00000000..b8de92ac
--- /dev/null
+++ b/apparmor.d/groups/cron/cron-etckeeper
@@ -0,0 +1,27 @@
+# apparmor.d - Full set of apparmor profiles
+# Copyright (C) 2022 Alexandre Pujol <alexandre@pujol.io>
+# SPDX-License-Identifier: GPL-2.0-only
+
+abi <abi/3.0>,
+
+include <tunables/global>
+
+@{exec_path} = /etc/cron.{hourly,daily,weekly,monthly}/etckeeper
+profile cron-etckeeper @{exec_path} {
+  include <abstractions/base>
+  include <abstractions/consoles>
+
+  @{exec_path} r,
+  
+  /{usr/,}bin/{,ba,da}sh  rix,
+  /{usr/,}bin/rm          rix,
+  /{usr/,}bin/find        rix,
+  /{usr/,}bin/etckeeper   rPx,
+
+  /etc/etckeeper/daily    rix,
+  /etc/etckeeper/etckeeper.conf r,
+
+  /var/cache/etckeeper/packagelist.pre-install rw,
+
+  include if exists <local/cron-etckeeper>
+}
diff --git a/apparmor.d/groups/cron/cron-sysstat b/apparmor.d/groups/cron/cron-sysstat
new file mode 100644
index 00000000..fe412784
--- /dev/null
+++ b/apparmor.d/groups/cron/cron-sysstat
@@ -0,0 +1,22 @@
+# apparmor.d - Full set of apparmor profiles
+# Copyright (C) 2022 Alexandre Pujol <alexandre@pujol.io>
+# SPDX-License-Identifier: GPL-2.0-only
+
+abi <abi/3.0>,
+
+include <tunables/global>
+
+@{exec_path} = /etc/cron.{hourly,daily,weekly,monthly}/sysstat
+profile cron-sysstat @{exec_path} {
+  include <abstractions/base>
+  include <abstractions/consoles>
+
+  @{exec_path} r,
+  
+  /{usr/,}bin/{,ba,da}sh  rix,
+  /{usr/,}lib/sysstat/sa2 rPx,
+
+  /etc/default/sysstat r,
+
+  include if exists <local/cron-sysstat>
+}