AA-CLEANPROF(8)

✨ NAME ✨

aa-cleanprof β€” bestie, this one gives an existing AppArmor security profile a full glow-up. ✨ It cleans it. That's the whole job, and it's iconic at it.


🌸 SYNOPSIS 🌸

aa-cleanprof <executable> [<executable> ...] [-d /path/to/profiles]
[--no-reload] [-s]

πŸ’… OPTIONS πŸ’…

  • -d --dir /path/to/profiles β€” tells it where to go look for the whole AppArmor security profile set. If you don't say anything, it lowkey just assumes /etc/apparmor.d (the default, the moment πŸŽ€).
  • --no-reload β€” don't reload the profile after you've modified it. Like, we changed it, we're just not refreshing it yet, ok?? 🫢
  • -s --silent β€” silently overwrites the profile without user prompt. No asking, no "r u sure bestie", it just does it. πŸ™ˆ

πŸ’– DESCRIPTION πŸ’–

So aa-cleanprof runs a cleanup on one or more profiles, and honestly? It's giving spring cleaning. 🧹✨

Here's what it does to your profile:

  • it removes any existing superfluous rules β€” meaning rules that are already covered under an include or another rule (redundant, extra, not needed, we don't know her πŸ’€)
  • it reorders the rules so similar rules get grouped together (organization, main character energy, we love to see it πŸ‘‘)
  • it removes all the comments from the file (yes, all of them, the comments are NOT surviving this, no cap 😭)

πŸ¦‹ BUGS πŸ¦‹

Found a bug? Not the vibe. 😀 Please report it over at:

https://gitlab.com/apparmor/apparmor/-/issues

🌈 SEE ALSO 🌈

apparmor(7), apparmor.d(5), aa-enforce(1), aa-complain(1), aa-disable(1), aa_change_hat(2), and the wiki at <https://wiki.apparmor.net>.


okay that's the whole page bestie, you're literally an aa-cleanprof expert now fr fr πŸ’œ This one comes from AppArmor 6.0.0~alpha1 and it's dated 2026-10-05. πŸŽ€ Stay clean, stay slay. πŸ’…β­

πŸ“¦ where this page comes from