genuinetools/bane

Health v2 · maintenance only

Adoption not part of the score

1230 stars · 90 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

bane is a Go command-line tool that generates custom AppArmor security profiles for Docker containers from a declarative TOML config file. It replaces hand-written AppArmor rules with generated, least-privilege profiles that can be installed and attached to containerized services.

Use cases

• generate an apparmor profile for a docker container
• confine a containerized nginx with apparmor without writing rules by hand
• harden docker containers with mandatory access control on linux
• create least-privilege file access rules for containerized services
• apparmor profile generator for oci containers
• manage container apparmor profiles from a toml config

When to choose

• You run Docker on an AppArmor-enabled Linux host such as Ubuntu or Debian and want a tailored profile per container
• You want profiles generated from a declarative config file instead of hand-editing /etc/apparmor.d rules
• You prefer a small single-binary Go CLI you can drop into provisioning scripts or CI

When to avoid

• Your host enforces SELinux or another MAC system instead of AppArmor
• You need actively maintained tooling - the last release was September 2020
• You primarily run containers on macOS or Windows, where AppArmor does not exist
• You need Kubernetes-native or Podman-focused security policy tooling rather than Docker-centric profiles

Facets

cli-tool · maturity abandoned

security developer-tools cli security operating-systems cli go apparmor apparmor-profile-generator docker-security mandatory-access-control container-hardening opencontainers genuinetools toml-config containers devops command-line linux docker

Member repositories

For agents

markdown · JSON · MCP: product_card(name="genuinetools/bane")