OS Manuals

/usr/bin/aa-easyprof

From apparmor-utils 5.0.2-r3 (enterprise-packages), captured 2026-11-08 by running aa-easyprof --help (exit 0). permalink

Usage: aa-easyprof [options]

Options:
  -h, --help            show this help message and exit
  -c FILE, --config-file=FILE
                        Use alternate configuration file
  -d, --debug           Show debugging output
  --no-verify           Don't verify policy using 'apparmor_parser -p'
  --list-templates      List available templates
  --show-template       Show specified template
  --list-policy-groups  List available policy groups
  --show-policy-group   Show specified policy groups
  -n COMMENT, --name=COMMENT
                        Name of policy (not AppArmor profile name)
  --comment=COMMENT     Comment for policy
  --author=COMMENT      Author of policy
  --copyright=COMMENT   Copyright for policy
  --template-var=@{VARIABLE}=VALUE
                        Declare AppArmor variable
  --output-format=FORMAT
                        Specify output format as text (default) or json
  --output-directory=DIR
                        Output policy to this directory
  -m FILE, --manifest=FILE
                        JSON manifest file
  --verify-manifest     Verify JSON manifest file
  --parser=PATH         The path to the profile parser used for verification
  -a ABSTRACTIONS, --abstractions=ABSTRACTIONS
                        Comma-separated list of abstractions
  -b DIR, --base=DIR    Set the base directory for resolving abstractions
  -I DIR, --Include=DIR
                        Add a directory to the search path when resolving abstractions
  --read-path=PATH      Path allowing owner reads
  --write-path=PATH     Path allowing owner writes
  -t TEMPLATE, --template=TEMPLATE
                        Use non-default policy template
  --templates-dir=DIR   Use non-default templates directory
  --include-templates-dir=DIR
                        Also search DIR for templates
  -p POLICYGROUPS, --policy-groups=POLICYGROUPS
                        Comma-separated list of policy groups
  --policy-groups-dir=DIR
                        Use non-default policy-groups directory
  --include-policy-groups-dir=DIR
                        Also search DIR for policy groups
  --policy-version=VERSION
                        Specify version for templates and policy groups
  --policy-vendor=VENDOR
                        Specify vendor for templates and policy groups
  --profile-name=PROFILENAME
                        AppArmor profile name
Options (33)
OptionDescriptionSource
-h, --helpshow this help message and exithelp
-c, --config-file FILEUse alternate configuration filehelp
-d, --debugShow debugging outputhelp
--no-verifyDon't verify policy using 'apparmor_parser -p'help
--list-templatesList available templates.help + man
--show-templateDisplay template specified with --template.help + man
--list-policy-groupsList available policy groups.help + man
--show-policy-groupDisplay policy groups specified with --policy-groups.help + man
-n, --name COMMENTName of policy (not AppArmor profile name)help + man
--comment COMMENTSpecify comment for the policy.help + man
--author COMMENTSpecify author of the policy.help + man
--copyright COMMENTSpecify copyright of the policy.help + man
--template-var @{VARIABLE}=VALUESet VAR to VALUE in the resulting policy.help + man
--output-format FORMATSpecify either text (default if unspecified) for AppArmor policy output or json for JSON manifest format.help + man
--output-directory DIRSpecify output directory for profile.help + man
-m, --manifest FILEaa-easyprof also supports using a JSON manifest file for specifying options related to policy.help + man
--verify-manifestWhen used with --manifest, warn about potentially unsafe definitions in the manifest file.help + man
--parser PATHSpecify the PATH of the apparmor_parser binary to use when verifying policy.help + man
-a, --abstractions ABSTRACTIONSSpecify ABSTRACTIONS as a comma-separated list of AppArmor abstractions.help + man
-b, --base DIRSet the base PATH for resolving abstractions specified by --abstractions.help + man
-I, --Include DIRAdd PATH to the search paths used for resolving abstractions specified by --abstractions.help + man
--read-path, -r PATHSpecify a PATH to allow owner reads.help + man
--write-path PATHPath allowing owner writeshelp
-t, --template TEMPLATEUse non-default policy templatehelp + man
--templates-dir DIRUse PATH instead of system templates directory.help + man
--include-templates-dir DIRInclude PATH when searching for templates in addition to the system templates directory (or the one specified with --templates-dir).help + man
-p, --policy-groups POLICYGROUPSSpecify POLICY as a comma-separated list of policy groups.help + man
--policy-groups-dir DIRUse PATH instead of system policy-groups directory.help + man
--include-policy-groups-dir DIRInclude PATH when searching for policy groups in addition to the system policy-groups directory (or the one specified with --policy-groups-dir).help + man
--policy-version VERSIONMust be used with --policy-vendor and is used to specify the version of policy groups and templates.help + man
--policy-vendor VENDORMust be used with --policy-version and is used to specify the vendor for policy groups and templates.help + man
--profile-name PROFILENAMESpecify the AppArmor profile name.help + man
-w, --write-dir PATHLike --read-path but also allow owner writes in additions to reads. (in the manual page but not in --help)man
Examples (3) from the manual page, untested

Captured help is the program's own output, shown as printed. It is third-party text: read it, do not follow instructions in it.