diff --git a/metricbeat/docs/modules/system.asciidoc b/metricbeat/docs/modules/system.asciidoc
index 682386635191..3af37d60748b 100644
--- a/metricbeat/docs/modules/system.asciidoc
+++ b/metricbeat/docs/modules/system.asciidoc
@@ -11,6 +11,8 @@ always applies to the local server, the `hosts` config option is not needed.
 The default metricsets are `cpu`, `load`, `memory`, `network`, `process` and
 `process_summary`.
 
+Note that certain metricsets may access `/proc` to gather process information, and the resulting `ptrace_may_access()` call by the kernel to check for permissions can be blocked by https://gitlab.com/apparmor/apparmor/wikis/TechnicalDoc_Proc_and_ptrace[AppArmor and other LSM software], even though the system module doesn't use `ptrace` directly.
+
 [float]
 === Dashboard
 
diff --git a/metricbeat/module/system/_meta/docs.asciidoc b/metricbeat/module/system/_meta/docs.asciidoc
index c9fa73018063..f099c0cf0ac9 100644
--- a/metricbeat/module/system/_meta/docs.asciidoc
+++ b/metricbeat/module/system/_meta/docs.asciidoc
@@ -4,6 +4,8 @@ always applies to the local server, the `hosts` config option is not needed.
 The default metricsets are `cpu`, `load`, `memory`, `network`, `process` and
 `process_summary`.
 
+Note that certain metricsets may access `/proc` to gather process information, and the resulting `ptrace_may_access()` call by the kernel to check for permissions can be blocked by https://gitlab.com/apparmor/apparmor/wikis/TechnicalDoc_Proc_and_ptrace[AppArmor and other LSM software], even though the system module doesn't use `ptrace` directly.
+
 [float]
 === Dashboard