The proc filesystem has a hidepid mount option to prevent inspecting the processes of other users. This is useful because it closes information leaks usable for keylogging and bypassing ASLR.

In order for Arch to support this out-of-the-box, it needs to provide a proc group for use with the corresponding procfs gid mount option. This will allow packages like polkit (polkitd user) that are incompatible with the restrictions to be given exceptions via membership in the group.