-h, --help | show this help message and exit | help |
-c, --config-file FILE | Use alternate configuration file | help |
-d, --debug | Show debugging output | help |
--no-verify | Don't verify policy using 'apparmor_parser -p' | help |
--list-templates | List available templates. | help + man |
--show-template | Display template specified with --template. | help + man |
--list-policy-groups | List available policy groups. | help + man |
--show-policy-group | Display policy groups specified with --policy-groups. | help + man |
-n, --name COMMENT | Name of policy (not AppArmor profile name) | help + man |
--comment COMMENT | Specify comment for the policy. | help + man |
--author COMMENT | Specify author of the policy. | help + man |
--copyright COMMENT | Specify copyright of the policy. | help + man |
--template-var @{VARIABLE}=VALUE | Set VAR to VALUE in the resulting policy. | help + man |
--output-format FORMAT | Specify either text (default if unspecified) for AppArmor policy output or json for JSON manifest format. | help + man |
--output-directory DIR | Specify output directory for profile. | help + man |
-m, --manifest FILE | aa-easyprof also supports using a JSON manifest file for specifying options related to policy. | help + man |
--verify-manifest | When used with --manifest, warn about potentially unsafe definitions in the manifest file. | help + man |
--parser PATH | Specify the PATH of the apparmor_parser binary to use when verifying policy. | help + man |
-a, --abstractions ABSTRACTIONS | Specify ABSTRACTIONS as a comma-separated list of AppArmor abstractions. | help + man |
-b, --base DIR | Set the base PATH for resolving abstractions specified by --abstractions. | help + man |
-I, --Include DIR | Add PATH to the search paths used for resolving abstractions specified by --abstractions. | help + man |
--read-path, -r PATH | Specify a PATH to allow owner reads. | help + man |
--write-path PATH | Path allowing owner writes | help |
-t, --template TEMPLATE | Use non-default policy template | help + man |
--templates-dir DIR | Use PATH instead of system templates directory. | help + man |
--include-templates-dir DIR | Include PATH when searching for templates in addition to the system templates directory (or the one specified with --templates-dir). | help + man |
-p, --policy-groups POLICYGROUPS | Specify POLICY as a comma-separated list of policy groups. | help + man |
--policy-groups-dir DIR | Use PATH instead of system policy-groups directory. | help + man |
--include-policy-groups-dir DIR | Include PATH when searching for policy groups in addition to the system policy-groups directory (or the one specified with --policy-groups-dir). | help + man |
--policy-version VERSION | Must be used with --policy-vendor and is used to specify the version of policy groups and templates. | help + man |
--policy-vendor VENDOR | Must be used with --policy-version and is used to specify the vendor for policy groups and templates. | help + man |
--profile-name PROFILENAME | Specify the AppArmor profile name. | help + man |
-w, --write-dir PATH | Like --read-path but also allow owner writes in additions to reads. (in the manual page but not in --help) | man |