apparmor_parser
Load, compile, and manage AppArmor security profiles. tldr-pages
On Linux
Linux
Load a profile into the kernel
sudo apparmor_parser --add profile_fileIdentifyReplace an existing profile
sudo apparmor_parser --replace profile_fileIdentifyRemove a profile from the kernel
sudo apparmor_parser --remove profile_nameIdentifyLoad a profile in complain mode (logs violations but doesn't block)
sudo apparmor_parser --complain --replace path/to/profileIdentifyPreprocess a profile (resolve includes) and write binary cache to file
apparmor_parser --preprocess --ofile path/to/output.cache --skip-kernel-load path/to/profileIdentifyPreprocess and print binary profile to stdout without loading
apparmor_parser --preprocess --stdout --skip-kernel-load path/to/profileIdentifyReplace a profile while skipping cache reads
sudo apparmor_parser --replace --skip-read-cache path/to/profileIdentifyReplace a profile, rebuild cache, and write it to a custom directory
sudo apparmor_parser --replace --write-cache --cache-loc /path/to/cache path/to/profileIdentify