aa-autodep(8)

aa-autodep8

Guess basic apparmor profile requirements

Usage

aa-autodep <executable> [<executable> ...] [-d /path/to/profiles] [-f]

Options

-d --dir /path/to/profiles

   Specifies where to look for the AppArmor security profile set.
   Defaults to /etc/apparmor.d.

-f --force

   Overwrites any existing AppArmor profile for the executable with the generated minimal AppArmor profile.

Overview

aa-autodep is used to generate a minimal AppArmor profile for a set of executables. This program will generate a profile for binary executable as well as interpreted script programs. At a minimum aa-autodep will provide a base profile containing a base include directive which includes basic profile entries needed by most programs.

The --force option will overwrite any existing profile for the executable with the newly generated minimal AppArmor profile.

Releases

8 releases since Debian 7 (Wheezy); the text changed 7 times.

  1. 7
  2. 8
  3. 9
  4. 10
  5. 11
  6. 12
  7. 13
  8. Arch

Bugs

This program does not perform full static analysis of executables, so the profiles generated are necessarily incomplete. If you find any bugs, please report them at <https://gitlab.com/apparmor/apparmor/-/issues>.

From apparmor 4.1.8-2 in Arch Linux 2026-11-01. Parsed by carta from the page's man source.