Manpages - aa-complain.8

aa-complain - set an AppArmor security profile to complain mode.

aa-complain <executable> [/<executable>/ …] [/-d path/to/profiles/] [–no-reload/]

-d –dir /path/to/profiles

Specifies where to look for the AppArmor security profile set. Defaults to /etc/apparmor.d.

–no-reload Do not reload the profile after modifying it.

aa-complain is used to set the enforcement mode for one or more profiles to complain mode. In this mode security policy is not enforced but rather access violations are logged to the system log.

Note that ’deny’ rules will be enforced even in complain mode.

If you find any bugs, please report them at https://gitlab.com/apparmor/apparmor/-/issues.

apparmor (7), apparmor.d (5), aa-enforce (1), aa-disable (1), aa_change_hat (2), and https://wiki.apparmor.net.