.\" -*- mode: troff; coding: utf-8 -*-
.\" Automatically generated by Pod::Man v6.0.2 (Pod::Simple 3.48)
.\"
.\" Standard preamble:
.\" ========================================================================
.de Sp \" Vertical space (when we can't use .PP)
.if t .sp .5v
.if n .sp
..
.de Vb \" Begin verbatim text
.ft CW
.nf
.ne \\$1
..
.de Ve \" End verbatim text
.ft R
.fi
..
.\" \*(C` and \*(C' are quotes in nroff, nothing in troff, for use with C<>.
.ie n \{\
.    ds C` ""
.    ds C' ""
'br\}
.el\{\
.    ds C`
.    ds C'
'br\}
.\"
.\" Escape single quotes in literal strings from groff's Unicode transform.
.ie \n(.g .ds Aq \(aq
.el       .ds Aq '
.\"
.\" If the F register is >0, we'll generate index entries on stderr for
.\" titles (.TH), headers (.SH), subsections (.SS), items (.Ip), and index
.\" entries marked with X<> in POD.  Of course, you'll have to process the
.\" output yourself in some meaningful fashion.
.\"
.\" Avoid warning from groff about undefined register 'F'.
.de IX
..
.nr rF 0
.if \n(.g .if rF .nr rF 1
.if (\n(rF:(\n(.g==0)) \{\
.    if \nF \{\
.        de IX
.        tm Index:\\$1\t\\n%\t"\\$2"
..
.        if !\nF==2 \{\
.            nr % 0
.            nr F 2
.        \}
.    \}
.\}
.rr rF
.\"
.\" Required to disable full justification in groff 1.23.0.
.if n .ds AD l
.\" ========================================================================
.\"
.IX Title "AA-SHOW-USAGE 8"
.TH AA-SHOW-USAGE 8 2026-10-26 "AppArmor 5.0.2" AppArmor
.\" For nroff, turn off justification.  Always turn off hyphenation; it makes
.\" way too many mistakes in technical documents.
.if n .ad l
.nh
.SH NAME
aa\-show\-usage \- Check which profiles are used
.SH SYNOPSIS
.IX Header "SYNOPSIS"
\&\fBaa\-show\-usage\fR [option]
.SH DESCRIPTION
.IX Header "DESCRIPTION"
\&\fBaa\-show\-usage\fR will display data on the usage of the profiles of the system
.SH OPTIONS
.IX Header "OPTIONS"
\&\fBaa\-show\-usage\fR accepts the following arguments:
.IP "\-s, \-\-show\-type {all,used,unused}" 4
.IX Item "-s, --show-type {all,used,unused}"
Type of profiles to show
.IP "\-j, \-\-json" 4
.IX Item "-j, --json"
Output in JSON
.IP "\-d, \-\-dir" 4
.IX Item "-d, --dir"
Path to profiles
.IP \-\-show\-matching\-path 4
.IX Item "--show-matching-path"
Show the path of a file matching the profile. Only the first matching path of an executable is shown (not the whole list).
.SH "FILTERING OPTIONS"
.IX Header "FILTERING OPTIONS"
\&\fBaa\-show\-usage\fR accepts the following filters to reduce the output of information to only those entries that will match the filter. Filters use Python\*(Aqs regular expression syntax.
.IP "\-\-filter.flags FLAGS" 4
.IX Item "--filter.flags FLAGS"
Filter by flags
.IP "\-\-filter.profile_name PROFILE_NAME" 4
.IX Item "--filter.profile_name PROFILE_NAME"
Filter by profile name
.IP "\-\-filter.profile_attach PROFILE_ATTACH" 4
.IX Item "--filter.profile_attach PROFILE_ATTACH"
Filter by profile attachment (i.e. by path of the executable to which this profile applies)
.IP "\-\-filter.profile_path PROFILE_PATH" 4
.IX Item "--filter.profile_path PROFILE_PATH"
Filter by profile path
.SH EXAMPLES
.IX Header "EXAMPLES"
Show both the list of used and unused profiles in your system.
.PP
.Vb 1
\&  $ aa\-show\-usage
.Ve
.PP
Show the list of unconfined profiles currently used by your system.
.PP
.Vb 1
\&  $ aa\-show\-usage \-\-show\-type=used \-\-filter.flags=unconfined
.Ve
.SH BUGS
.IX Header "BUGS"
\&\fBaa\-show\-usage\fR needs to be able to read profiles to tell whether they are used in practice.
.PP
\&\fBaa\-show\-usage\fR will only report directly used profiles. Profiles used via profile transitions, systemd\*(Aqs \fBAppArmorProfile=\fR, or API call such as \fBaa\-exec\fR are not shown as used.
.PP
If you find any additional bugs, please report them at <https://gitlab.com/apparmor/apparmor/\-/issues>.
.SH "SEE ALSO"
.IX Header "SEE ALSO"
\&\fBapparmor\fR\|(7)