aa-audit(8)

aa-audit8

Set an apparmor security profile to audit mode.

Usage

aa-audit <executable> [<executable> ...] [-d /path/to/profiles] [--no-reload] [-r]

Options

-d --dir /path/to/profiles

   Specifies where to look for the AppArmor security profile set.
   Defaults to /etc/apparmor.d.

--no-reload
Do not reload the profile after modifying it.

-r --remove

   Removes the audit mode for the profile.

Overview

aa-audit is used to set one or more profiles to audit mode. In this mode security policy is enforced and all access (successes and failures) are logged to the system log.

The --remove option can be used to remove the audit mode for the profile.

Releases

8 releases since Debian 7 (Wheezy); the text changed 7 times.

  1. 7
  2. 8
  3. 9
  4. 10
  5. 11
  6. 12
  7. 13
  8. Arch

Bugs

If you find any bugs, please report them at <https://gitlab.com/apparmor/apparmor/-/issues>.

From apparmor 4.1.8-2 in Arch Linux 2026-11-01. Parsed by carta from the page's man source.