---
name: "aa-exec"
section: "8"
platform: "linux"
package: "apparmor"
version: "2.9.0-3"
release: "Debian 8 (Jessie)"
platforms: ["linux"]
url: "https://new.carta.tech/aa-exec/8"
---

# aa-exec(8)

confine a program with the specified AppArmor profile

## NAME

aa-exec - confine a program with the specified AppArmor profile

## SYNOPSIS

**aa-exec** \[options\] \[--\] \[*\<command\>* ...\]

## DESCRIPTION

**aa-exec** is used to launch a program confined by the specified profile and or namespace.  If both a profile and namespace are specified command will be confined by profile in the new policy namespace.  If only a namespace is specified, the profile name of the current confinement will be used.  If neither a profile or namespace is specified command will be run using standard profile attachment (ie. as if run without the aa-exec command).

If the arguments are to be pasted to the *\<command\>* being invoked by aa-exec then -- should be used to separate aa-exec arguments from the command.\
   aa-exec -p profile1 -- ls -l

## OPTIONS aa-exec accepts the following arguments:

- \-p PROFILE, --profile=PROFILE

  confine *\<command\>* with PROFILE. If the PROFILE is not specified use the current profile name (likely unconfined).

- \-n NAMESPACE, --namespace=NAMESPACE

  use profiles in NAMESPACE.  This will result in confinement transitioning to using the new profile namespace.

- \-f FILE, --file=FILE

  a file or directory containing profiles to load before confining the program.

- \-i, --immediate

  transition to PROFILE before doing executing *\<command\>*.  This subjects the running of *\<command\>* to the exec transition rules of the current profile.

- \-v, --verbose

  show commands being performed

- \-d, --debug

  show commands and error codes

- \--

  Signal the end of options and disables further option processing. Any arguments after the -- are treated as arguments of the command.  This is useful when passing arguments to the *\<command\>* being invoked by aa-exec.

## BUGS

If you find any bugs, please report them at \<https://bugs.launchpad.net/apparmor/+filebug\>.

## SEE ALSO

*aa-stack*(8), *aa-namespace*(8), [*apparmor*(7)](/apparmor/7.md), [*apparmor.d*(5)](/apparmor.d/5.md), *aa\_change\_profile*(3), *aa\_change\_onexec*(3) and \<http://wiki.apparmor.net\>.