.\" -*- mode: troff; coding: utf-8 -*-
.\" Automatically generated by Pod::Man 5.01 (Pod::Simple 3.43)
.\"
.\" Standard preamble:
.\" ========================================================================
.de Sp \" Vertical space (when we can't use .PP)
.if t .sp .5v
.if n .sp
..
.de Vb \" Begin verbatim text
.ft CW
.nf
.ne \\$1
..
.de Ve \" End verbatim text
.ft R
.fi
..
.\" \*(C` and \*(C' are quotes in nroff, nothing in troff, for use with C<>.
.ie n \{\
.    ds C` ""
.    ds C' ""
'br\}
.el\{\
.    ds C`
.    ds C'
'br\}
.\"
.\" Escape single quotes in literal strings from groff's Unicode transform.
.ie \n(.g .ds Aq \(aq
.el       .ds Aq '
.\"
.\" If the F register is >0, we'll generate index entries on stderr for
.\" titles (.TH), headers (.SH), subsections (.SS), items (.Ip), and index
.\" entries marked with X<> in POD.  Of course, you'll have to process the
.\" output yourself in some meaningful fashion.
.\"
.\" Avoid warning from groff about undefined register 'F'.
.de IX
..
.nr rF 0
.if \n(.g .if rF .nr rF 1
.if (\n(rF:(\n(.g==0)) \{\
.    if \nF \{\
.        de IX
.        tm Index:\\$1\t\\n%\t"\\$2"
..
.        if !\nF==2 \{\
.            nr % 0
.            nr F 2
.        \}
.    \}
.\}
.rr rF
.\" ========================================================================
.\"
.IX Title "DH_APPARMOR 1"
.TH DH_APPARMOR 1 2024-03-25 3.0.13-2 Debhelper
.\" For nroff, turn off justification.  Always turn off hyphenation; it makes
.\" way too many mistakes in technical documents.
.if n .ad l
.nh
.SH NAME
dh_apparmor \- reload AppArmor profile and create local include
.SH SYNOPSIS
.IX Header "SYNOPSIS"
\&\fBdh_apparmor\fR [\fB\-\-manifest=\fR\fImanifestfile\fR] \fB\-\-profile\-name=\fR\fIprofilename\fR
.SH DESCRIPTION
.IX Header "DESCRIPTION"
dh_apparmor is a debhelper program that will create/remove the
/etc/apparmor.d/local/<profilename> include file in maintainer scripts. It
also reloads the specified AppArmor profile in postinst using:
.Sp
.RS 4
apparmor_parser \-r \-W \-T /etc/apparmor.d/<profilename>
.RE
.PP
By using '\-W \-T' we ensure that any abstraction updates are also pulled in.
.SH OPTIONS
.IX Header "OPTIONS"
.IP \fB\-\-profile\-name=\fR<profilename> 4
.IX Item "--profile-name=<profilename>"
Specify the profile name. Eg:
.Sp
dh_apparmor \-\-profile\-name=bin.foo
dh_apparmor \-\-profile\-name=bin.foo \-p foo
.IP \fB\-\-manifest=\fR<manifestfile> 4
.IX Item "--manifest=<manifestfile>"
Optionally specify a manifest file. When specified, a profile is generated by
calling \fBaa\-easyprof\|(8)\fR with the specified manifest file and putting the
resulting profile in debian/apparmor/<profilename>. Eg, if there is a valid
manifest in debian/manifest.json, then the following command will create
debian/apparmor/bin.bar for the 'bar' package (you will need to clean this up
via override_dh_clean or similar).
.Sp
dh_apparmor \-\-manifest=manifest.json \-\-profile\-name=bin.bar \-p bar
.Sp
Because not all build environments support the apparmor kernel interface,
\&\fBaa\-easyprof\|(8)\fR is called with the \-\-no\-verify option. Use of this option
requires that apparmor-utils is installed.
.SH NOTES
.IX Header "NOTES"
When using modern dh packaging techniques, dh_apparmor can be added to the
override_dh_install section of the rules file. Note that for packages that
have multiple binary packages, you will want to pass '\-p<package name>' to
dh_apparmor, otherwise dh_apparmor will add AppArmor reload commands for all
packages rather than just the one that ships the profile.
.PP
In addition, you will have to install the profile itself in /etc/apparmor.d.
Eg, in the above manifest file example if you are using dh_install you would
add to debian/bar.install:
.Sp
.RS 4
debian/apparmor/bin.bar etc/apparmor.d
.RE
.SH "SEE ALSO"
.IX Header "SEE ALSO"
\&\fBdebhelper\fR\|(7) \fBaa\-easyprof\fR\|(8)
.PP
This program is a part of debhelper.
.SH AUTHOR
.IX Header "AUTHOR"
Jamie Strandboge <jamie@canonical.com>