3 manpage_aa complain.8
John Johansen edited this page 2020-09-27 16:23:58 -07:00

Navigation

Return to manpage Index

NAME

aa-complain - set an AppArmor security profile to complain mode.

SYNOPSIS

aa-complain <executable> [<executable> ...] [-d /path/to/profiles] [--no-reload]

OPTIONS

-d --dir /path/to/profiles

Specifies where to look for the AppArmor security profile set.
Defaults to /etc/apparmor.d.

--no-reload Do not reload the profile after modifying it.

DESCRIPTION

aa-complain is used to set the enforcement mode for one or more profiles to complain mode. In this mode security policy is not enforced but rather access violations are logged to the system log.

Note that 'deny' rules will be enforced even in complain mode.

BUGS

If you find any bugs, please report them at https://gitlab.com/apparmor/apparmor/-/issues.

SEE ALSO

apparmor(7), apparmor.d(5), aa-enforce(1), aa-disable(1), aa_change_hat(2), and https://wiki.apparmor.net.