.\" -*- mode: troff; coding: utf-8 -*- .\" Automatically generated by Pod::Man 5.01 (Pod::Simple 3.43) .\" .\" Standard preamble: .\" ======================================================================== .de Sp \" Vertical space (when we can't use .PP) .if t .sp .5v .if n .sp .. .de Vb \" Begin verbatim text .ft CW .nf .ne \\$1 .. .de Ve \" End verbatim text .ft R .fi .. .\" \*(C` and \*(C' are quotes in nroff, nothing in troff, for use with C<>. .ie n \{\ . ds C` "" . ds C' "" 'br\} .el\{\ . ds C` . ds C' 'br\} .\" .\" Escape single quotes in literal strings from groff's Unicode transform. .ie \n(.g .ds Aq \(aq .el .ds Aq ' .\" .\" If the F register is >0, we'll generate index entries on stderr for .\" titles (.TH), headers (.SH), subsections (.SS), items (.Ip), and index .\" entries marked with X<> in POD. Of course, you'll have to process the .\" output yourself in some meaningful fashion. .\" .\" Avoid warning from groff about undefined register 'F'. .de IX .. .nr rF 0 .if \n(.g .if rF .nr rF 1 .if (\n(rF:(\n(.g==0)) \{\ . if \nF \{\ . de IX . tm Index:\\$1\t\\n%\t"\\$2" .. . if !\nF==2 \{\ . nr % 0 . nr F 2 . \} . \} .\} .rr rF .\" ======================================================================== .\" .IX Title "AA-AUTODEP 8" .TH AA-AUTODEP 8 2024-03-25 "AppArmor 3.0.13" AppArmor .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l .nh .SH NAME aa\-autodep \- guess basic AppArmor profile requirements .SH SYNOPSIS .IX Header "SYNOPSIS" \&\fBaa-autodep \fR\f(BI\fR\fB [\fR\f(BI\fR\fB ...] [\fR\f(BI\-d /path/to/profiles\fR\fB] [\fR\f(BI\-f\fR\fB]\fR .SH OPTIONS .IX Header "OPTIONS" \&\fB\-d \-\-dir /path/to/profiles\fR .PP .Vb 2 \& Specifies where to look for the AppArmor security profile set. \& Defaults to /etc/apparmor.d. .Ve .PP \&\fB\-f \-\-force\fR .PP .Vb 1 \& Overwrites any existing AppArmor profile for the executable with the generated minimal AppArmor profile. .Ve .SH DESCRIPTION .IX Header "DESCRIPTION" \&\fBaa-autodep\fR is used to generate a minimal AppArmor profile for a set of executables. This program will generate a profile for binary executable as well as interpreted script programs. At a minimum aa-autodep will provide a base profile containing a base include directive which includes basic profile entries needed by most programs. The profile is generated by recursively calling \fBldd\fR\|(1) on the executables listed on the command line. .PP The \fI\-\-force\fR option will overwrite any existing profile for the executable with the newly generated minimal AppArmor profile. .SH BUGS .IX Header "BUGS" This program does not perform full static analysis of executables, so the profiles generated are necessarily incomplete. If you find any bugs, please report them at . .SH "SEE ALSO" .IX Header "SEE ALSO" \&\fBapparmor\fR\|(7), \fBapparmor.d\fR\|(5), \fBaa\-complain\fR\|(1), \fBaa\-enforce\fR\|(1), \fBaa\-disable\fR\|(1), \&\fBaa_change_hat\fR\|(2), and .