Document the ability for apparmor_parser to load profiles from a dir Update the apparmor_parser documentation for the new ability to load profiles from a specified directory.
Signed-off-by: John Johansen <[email protected]> --- parser/apparmor_parser.pod | 15 +++++++++++---- 1 file changed, 11 insertions(+), 4 deletions(-) --- 3.0-diff.orig/parser/apparmor_parser.pod +++ 3.0-diff/parser/apparmor_parser.pod @@ -28,7 +28,7 @@ =head1 SYNOPSIS -B<apparmor_parser [options] E<lt>commandE<gt> [profile]...> +B<apparmor_parser [options] E<lt>commandE<gt> [profiles]...> B<apparmor_parser [options] E<lt>commandE<gt>> @@ -41,9 +41,16 @@ AppArmor profiles restrict the operations available to processes. -The profiles are loaded into the Linux kernel by the B<apparmor_parser> -program, which by default takes its input from standard input. The input -supplied to B<apparmor_parser> should be in the format described in +The B<profiles> are loaded into the Linux kernel by the B<apparmor_parser> +program. The B<profiles> may be specified by file name or a directory +name containing a set of profiles. If a directory is specified then the +B<apparmor_parser> will try to do a profile load for each file in the +directory that is not a dot file, or explicitly black listed (*.dpkg-new, +*.dpkg-old, *.dpkg-dist, *-dpkg-bak, *.repnew, *.rpmsave, *orig, *.rej, +*~). The B<apparmor_parser> will fall back to taking input from standard +input if a profile or directory is not supplied. + +The input supplied to B<apparmor_parser> should be in the format described in apparmor.d(5). =head1 COMMANDS -- AppArmor mailing list [email protected] Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/apparmor
