AA-SHOW-USAGE(8)

💖 AA-SHOW-USAGE(8) 💖

okay bestie, welcome to the AppArmor girlie corner of section 8 of the manual, and today's main character is aa-show-usage 🎀

---

🌸 NAME 🌸

aa-show-usage — bestie, it literally checks which profiles are used 👑

---

✨ SYNOPSIS ✨

aa-show-usage [option]

---

🦋 DESCRIPTION 🦋

so, aa-show-usage will display data on the usage of the profiles of the system. that's it, that's the vibe. it pulls up the receipts on your profiles and tells you which ones are actually out there living their lives, no cap 🫶

---

💅 OPTIONS 💅

aa-show-usage accepts the following arguments:

• -s, --show-type {all,used,unused} — picks the type of profiles to show. the valid choices are all, used and unused, and yes you gotta pick from those, it's giving very specific menu energy 💖
• -j, --json — output in JSON. for the girlies who pipe things into other things 🔥
• -d, --dir — path to profiles
• --show-matching-path — shows the path of a file matching the profile. heads up tho: only the first matching path of an executable is shown, not the whole list. so don't come for it when it shows exactly one ✨

---

🌈 FILTERING OPTIONS 🌈

aa-show-usage accepts the following filters to reduce the output of information to only those entries that will match the filter. ngl this is the part that makes the output chef's kiss instead of a wall of text. filters use Python's regular expression syntax — so bring your regex brain, bestie 🧚

• --filter.flags FLAGS — filter by flags
• --filter.profile_name PROFILE_NAME — filter by profile name
• --filter.profile_attach PROFILE_ATTACH — filter by profile attachment (i.e. by path of the executable to which this profile applies)
• --filter.profile_path PROFILE_PATH — filter by profile path

---

🍓 EXAMPLES 🍓

show both the list of used and unused profiles in your system. iconic, no args, she just knows:

$ aa-show-usage

show the list of unconfined profiles currently used by your system:

$ aa-show-usage --show-type=used --filter.flags=unconfined

---

💀 BUGS 💀

• aa-show-usage needs to be able to read profiles to tell whether they are used in practice. so if it can't read them, bestie, it simply cannot tell you. tragic but true 😭
• aa-show-usage will only report directly used profiles. profiles used via profile transitions, systemd's AppArmorProfile=, or API call such as aa-exec are not shown as used. so like, don't @ it, it's not being shady on purpose 🙈
• If you find any additional bugs, please report them at <https://gitlab.com/apparmor/apparmor/-/issues>. go off, file that issue, the maintainers wanna hear it 💜

---

👑 SEE ALSO 👑

• apparmor(7)

---

and that's the whole page, periodt. this lil manual is from AppArmor 6.0.0~alpha1, dated 2026-10-05 — ty for reading, mwah 💋💖