community man page

apparmor_parser

GNU

Load, compile, and manage AppArmor security profiles.

8 examples·source: tldr · CC-BY·status: verified

Reading is open to everyone. Suggesting a flag, fixing an example or adding a recipe is opening to verified-email accounts soon — every change is moderated before it goes live.

curl https://curlhub.sh/man/apparmor_parser

same page, in your terminal

Examples

Load a profile into the kernel GNU

sudo apparmor_parser [-a|--add] profile_file

Replace an existing profile GNU

sudo apparmor_parser [-r|--replace] profile_file

Remove a profile from the kernel GNU

sudo apparmor_parser [-R|--remove] profile_name

Load a profile in complain mode (logs violations but doesn't block) GNU

sudo apparmor_parser [-C|--complain] [-r|--replace] path/to/profile

Preprocess a profile (resolve includes) and write binary cache to file GNU

apparmor_parser [-p|--preprocess] [-o|--ofile] path/to/output.cache [-Q|--skip-kernel-load] path/to/profile

Preprocess and print binary profile to `stdout` without loading GNU

apparmor_parser [-p|--preprocess] [-S|--stdout] [-Q|--skip-kernel-load] path/to/profile

Replace a profile while skipping cache reads GNU

sudo apparmor_parser [-r|--replace] [-T|--skip-read-cache] path/to/profile

Replace a profile, rebuild cache, and write it to a custom directory GNU

sudo apparmor_parser [-r|--replace] [-W|--write-cache] [-L|--cache-loc] /path/to/cache path/to/profile