aa-audit

AA-AUDIT(8) AppArmor AA-AUDIT(8)

NAME

   aa-audit - set an AppArmor security profile to audit mode.

SYNOPSIS

   aa-audit <executable> [<executable> ...] [-d /path/to/profiles] [--no-reload] [-r]

OPTIONS

   -d --dir  /path/to/profiles

      Specifies where to look for the AppArmor security profile set.
      Defaults to /etc/apparmor.d.

   --no-reload
      Do not reload the profile after modifying it.

   -r --remove

      Removes the audit mode for the profile.

DESCRIPTION

   aa-audit is used to set one or more profiles to audit mode.  In this mode security policy is enforced and all access (successes and failures) are logged to
   the system log.

   The --remove option can be used to remove the audit mode for the profile.

BUGS

   If you find any bugs, please report them at <https://gitlab.com/apparmor/apparmor/-/issues>.

SEE ALSO

   apparmor(7), apparmor.d(5), aa-enforce(1), aa-complain(1), aa-disable(1), aa_change_hat(2), and <https://wiki.apparmor.net>.

AppArmor 3.0.8 2023-02-14 AA-AUDIT(8)