AA-AUTODEP(8) AppArmor AA-AUTODEP(8)

# [NAME](#NAME)

aa-autodep - guess basic AppArmor profile requirements

# [SYNOPSIS](#SYNOPSIS)

**aa-autodep *<executable>* \[*<executable>* ...] \[*-d /path/to/profiles*] \[*-f*]**

# [OPTIONS](#OPTIONS)

**-d --dir /path/to/profiles**

```
   Specifies where to look for the AppArmor security profile set.
   Defaults to /etc/apparmor.d.
```

**-f --force**

```
   Overwrites any existing AppArmor profile for the executable with the generated minimal AppArmor profile.
```

# [DESCRIPTION](#DESCRIPTION)

**aa-autodep** is used to generate a minimal AppArmor profile for a set of executables. This program will generate a profile for binary executable as well as interpreted script programs. At a minimum aa-autodep will provide a base profile containing a base include directive which includes basic profile entries needed by most programs.

The *--force* option will overwrite any existing profile for the executable with the newly generated minimal AppArmor profile.

# [BUGS](#BUGS)

This program does not perform full static analysis of executables, so the profiles generated are necessarily incomplete. If you find any bugs, please report them at <https://gitlab.com/apparmor/apparmor/-/issues>.

# [SEE ALSO](#SEE_ALSO)

[**apparmor**(7)](/man/enterprise-packages/apparmor-utils/apparmor.7), [**apparmor.d**(5)](/man/enterprise-packages/apparmor-utils/apparmor.d.5), [**aa-complain**(1)](/man/enterprise-packages/apparmor-utils/aa-complain.1), [**aa-enforce**(1)](/man/enterprise-packages/apparmor-utils/aa-enforce.1), [**aa-disable**(1)](/man/enterprise-packages/apparmor-utils/aa-disable.1), [**aa\_change\_hat**(2)](/man/enterprise-packages/apparmor-utils/aa_change_hat.2), and <https://wiki.apparmor.net>.

2026-10-26 AppArmor 5.0.2

---

Document: aa-autodep(8) from apparmor-utils 5.0.2-r3 (Chainguard OS)
Source: https://gitlab.com/apparmor/apparmor.git