tldr/pages/linux/aa-audit.md

aa-audit

Set AppArmor security profiles to audit mode. More information: https://gitlab.com/apparmor/apparmor/-/wikis/manpage_aa-audit.8.

• Set a profile to audit mode:

sudo aa-audit {{profile_name}}

• Set multiple profiles to audit mode:

sudo aa-audit {{profile1 profile2 ...}}

• Set a profile to audit mode from a specific directory:

sudo aa-audit {{[-d|--dir]}} /{{path/to/profiles}} {{profile_name}}

• Force audit mode even if already applied:

sudo aa-audit --force {{profile_name}}

• Set a profile to audit mode without reloading it:

sudo aa-audit --no-reload {{profile_name}}

• Remove audit mode for a profile:

sudo aa-audit {{[-r|--remove]}} {{profile_name}}

• Display help:

aa-audit {{[-h|--help]}}