110 lines
3.6 KiB
HTML
110 lines
3.6 KiB
HTML
|
|
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
|
|
<HTML><HEAD><TITLE>Man page of AA-EXEC</TITLE>
|
|
</HEAD><BODY>
|
|
<H1>AA-EXEC</H1>
|
|
Section: AppArmor (1)<BR>Updated: 2020-05-19<BR><A HREF="#index">Index</A>
|
|
<A HREF="/cgi-bin/man/man2html">Return to Main Contents</A><HR>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
<A NAME="lbAB"> </A>
|
|
<H2>NAME</H2>
|
|
|
|
aa-exec - confine a program with the specified AppArmor profile
|
|
<A NAME="lbAC"> </A>
|
|
<H2>SYNOPSIS</H2>
|
|
|
|
|
|
|
|
<B>aa-exec</B> [options] [--] [<I><command></I> ...]
|
|
<A NAME="lbAD"> </A>
|
|
<H2>DESCRIPTION</H2>
|
|
|
|
|
|
|
|
<B>aa-exec</B> is used to launch a program confined by the specified profile
|
|
and or namespace. If both a profile and namespace are specified command
|
|
will be confined by profile in the new policy namespace. If only a namespace
|
|
is specified, the profile name of the current confinement will be used. If
|
|
neither a profile or namespace is specified command will be run using
|
|
standard profile attachment (ie. as if run without the aa-exec command).
|
|
<P>
|
|
|
|
If the arguments are to be pasted to the <I><command></I> being invoked
|
|
by aa-exec then --- should be used to separate aa-exec arguments from the
|
|
command.
|
|
<BR> aa-exec -p profile1 --- ls -l
|
|
<A NAME="lbAE"> </A>
|
|
<H2>OPTIONS <B>aa-exec</B> accepts the following arguments:</H2>
|
|
|
|
|
|
|
|
<DL COMPACT>
|
|
<DT id="1">-p <FONT SIZE="-1">PROFILE,</FONT> --profile=PROFILE<DD>
|
|
|
|
|
|
confine <I><command></I> with <FONT SIZE="-1">PROFILE.</FONT> If the <FONT SIZE="-1">PROFILE</FONT> is not specified
|
|
use the current profile name (likely unconfined).
|
|
<DT id="2">-n <FONT SIZE="-1">NAMESPACE,</FONT> --namespace=NAMESPACE<DD>
|
|
|
|
|
|
use profiles in <FONT SIZE="-1">NAMESPACE.</FONT> This will result in confinement transitioning
|
|
to using the new profile namespace.
|
|
<DT id="3">-i, --immediate<DD>
|
|
|
|
|
|
transition to <FONT SIZE="-1">PROFILE</FONT> before doing executing <I><command></I>. This
|
|
subjects the running of <I><command></I> to the exec transition rules
|
|
of the current profile.
|
|
<DT id="4">-v, --verbose<DD>
|
|
|
|
|
|
show commands being performed
|
|
<DT id="5">-d, --debug<DD>
|
|
|
|
|
|
show commands and error codes
|
|
<DT id="6">--<DD>
|
|
Signal the end of options and disables further option processing. Any
|
|
arguments after the --- are treated as arguments of the command. This is
|
|
useful when passing arguments to the <I><command></I> being invoked by
|
|
aa-exec.
|
|
</DL>
|
|
<A NAME="lbAF"> </A>
|
|
<H2>BUGS</H2>
|
|
|
|
|
|
|
|
If you find any bugs, please report them at
|
|
<<A HREF="https://bugs.launchpad.net/apparmor/+filebug">https://bugs.launchpad.net/apparmor/+filebug</A>>.
|
|
<A NAME="lbAG"> </A>
|
|
<H2>SEE ALSO</H2>
|
|
|
|
|
|
|
|
<B><A HREF="/cgi-bin/man/man2html?8+aa-stack">aa-stack</A></B>(8), <B><A HREF="/cgi-bin/man/man2html?8+aa-namespace">aa-namespace</A></B>(8), <B><A HREF="/cgi-bin/man/man2html?7+apparmor">apparmor</A></B>(7), <B><A HREF="/cgi-bin/man/man2html?5+apparmor.d">apparmor.d</A></B>(5), <B><A HREF="/cgi-bin/man/man2html?3+aa_change_profile">aa_change_profile</A></B>(3),
|
|
<B><A HREF="/cgi-bin/man/man2html?3+aa_change_onexec">aa_change_onexec</A></B>(3) and <<A HREF="https://wiki.apparmor.net">https://wiki.apparmor.net</A>>.
|
|
<P>
|
|
|
|
<HR>
|
|
<A NAME="index"> </A><H2>Index</H2>
|
|
<DL>
|
|
<DT id="7"><A HREF="#lbAB">NAME</A><DD>
|
|
<DT id="8"><A HREF="#lbAC">SYNOPSIS</A><DD>
|
|
<DT id="9"><A HREF="#lbAD">DESCRIPTION</A><DD>
|
|
<DT id="10"><A HREF="#lbAE">OPTIONS <B>aa-exec</B> accepts the following arguments:</A><DD>
|
|
<DT id="11"><A HREF="#lbAF">BUGS</A><DD>
|
|
<DT id="12"><A HREF="#lbAG">SEE ALSO</A><DD>
|
|
</DL>
|
|
<HR>
|
|
This document was created by
|
|
<A HREF="/cgi-bin/man/man2html">man2html</A>,
|
|
using the manual pages.<BR>
|
|
Time: 00:05:06 GMT, March 31, 2021
|
|
</BODY>
|
|
</HTML>
|