Manpages - aa-enforce.8

aa-enforce - set an AppArmor security profile to enforce mode from being disabled or complain mode.

aa-enforce <executable> [/<executable>/ …] [/-d path/to/profiles/] [–no-reload/]

-d –dir / path/to/profiles

Specifies where to look for the AppArmor security profile set. Defaults to /etc/apparmor.d.

–no-reload Do not reload the profile after modifying it.

aa-enforce is used to set one or more profiles to enforce mode. This command is only relevant in conjunction with the aa-complain utility which sets a profile to complain mode and the aa-disable utility which unloads and disables a profile. The default mode for a security policy is enforce and the aa-complain utility must be run to change this behavior.

If you find any bugs, please report them at https://gitlab.com/apparmor/apparmor/-/issues.

apparmor (7), apparmor.d (5), aa-complain (1), aa-disable (1), aa_change_hat (2), and https://wiki.apparmor.net.