AA-AUTODEP(8)

📦 version 4.1.7, in opensuse-leap 16.0

💖 NAME 💖

okay so bestie, welcome to the aa-autodep page from AppArmor, section 8 — yes, it's giving manual-page royalty 👑. This is the tool that guesses basic AppArmor profile requirements. Slay.

✨ SYNOPSIS ✨

aa-autodep <executable> [<executable> ...] [-d /path/to/profiles] [-f]

Translation: hand it one or more executables, optionally point it at a profile dir, optionally force it. Tiny command, big profile energy ✨

🎀 OPTIONS 🎀

  • -d, --dir /path/to/profiles — tells aa-autodep where to look for the AppArmor security profile set. Defaults to /etc/apparmor.d — that's the home base, no cap 🏠.
  • -f, --force — overwrites any existing AppArmor profile for the executable with the generated minimal AppArmor profile. Yes bestie, it will absolutely replace what's there, so know that before you press enter 😭.

🦋 DESCRIPTION 🦋

okay so here's the tea: aa-autodep is used to generate a minimal AppArmor profile for a set of executables. It'll generate a profile for a binary executable as well as interpreted script programs — scripts get love too, periodt. At a minimum, aa-autodep will provide a base profile containing a base include directive which includes basic profile entries needed by most programs. It's like the starter pack, the bare minimum slay 🧚.

The --force option will overwrite any existing profile for the executable with the newly generated minimal AppArmor profile. So like, don't do it unless you mean it, bestie 💀.

💀 BUGS 💀

big caveat, bestie: this program does not perform full static analysis of executables, so the profiles generated are necessarily incomplete. It's giving "best effort, not psychic" energy, fr fr. If you find any bugs, please report them at <https://gitlab.com/apparmor/apparmor/-/issues> — they want the receipts 🫶.

🌈 SEE ALSO 🌈

mwah 💋 that's the whole page, bestie — brought to you by AppArmor 4.1.7, dated 2026-05-19, and filed under AA-AUTODEP(8). go off, profile queen 👑.

📦 where this page comes from