Comment 3 for bug 491510

It needs to exec arbitrary files, and have enough permissions to read arbitrary files (depending on what the admin configures it to do). I don't think it would be feasible to create a generic apparmor profile for it. The apparmor profile would need to be created by the administrator to match what they're using monit for.

This is a scary application security-wise.