aa-enforce(8)

aa-enforce8

Set an apparmor security profile to enforce mode from being disabled or complain mode.

Usage

aa-enforce <executable> [<executable> ...] [-d /path/to/profiles] [--no-reload]

Options

-d --dir / path/to/profiles

   Specifies where to look for the AppArmor security profile set.
   Defaults to /etc/apparmor.d.

--no-reload
Do not reload the profile after modifying it.

Overview

aa-enforce is used to set one or more profiles to enforce mode. This command is only relevant in conjunction with the aa-complain utility which sets a profile to complain mode and the aa-disable utility which unloads and disables a profile. The default mode for a security policy is enforce and the aa-complain utility must be run to change this behavior.

Releases

8 releases since Debian 7 (Wheezy); the text changed 7 times.

  1. 7
  2. 8
  3. 9
  4. 10
  5. 11
  6. 12
  7. 13
  8. Arch

Bugs

If you find any bugs, please report them at <https://gitlab.com/apparmor/apparmor/-/issues>.

From apparmor 4.1.8-2 in Arch Linux 2026-11-01. Parsed by carta from the page's man source.