I don't really have any experience with AppArmor myself but if people would find this useful I was no objections to incuding it in sudo. I would, however, suggest a more specific option name than PROFILE. Otherwise, there could be a conflict with existing sudoers files that define a PROFILE command alias. - todd