aa-unconfined(8) on Linux
The text d663403cfc2d, as Debian 10 (Buster) shipped it.
output a list of processes with tcp or udp ports that do not have AppArmor profiles loaded
Flags it lists
-
--paranoid -
--with-netstat -
--with-ss