[19:19] <ahasenack> hi security,
[19:19] <ahasenack> what's the best way to check an apparmor profile for syntax, without loading it?
[19:19] <ahasenack> apparmor_parser -d <textprofile>?
[19:22] <georgiag> ahasenack: -Q (or --skip-kernel-load) does everything except load the profile in the kernel
[19:22] <ahasenack> I'm generating a profile dynamically and wanted to check it before loading
[19:22] <ahasenack> ah
[19:22] <ahasenack> does it also change the cache?
[19:22] <ahasenack> (I wouldn't want it to)
[19:23] <georgiag> not sure, I can double check. but you can also use -K (or --skip-cache)
[19:23] <ahasenack> I think this works, thanks