AA-ENFORCE(8)

πŸ“¦ version 4.1.7, in opensuse-leap 16.0

πŸ’… AA-ENFORCE(8) β€” the AppArmor one ✨

okay so real talk, this is a page from the AppArmor manual set (section 8, sysadmin commands, iykyk) and honestly? it's short, it's sweet, and it's about to make your profiles behave. let's go πŸŽ€


✨ NAME ✨

aa-enforce β€” the glow-up button for an AppArmor security profile: it flips a profile into enforce mode, pulling it out of being disabled or stuck in complain mode. periodt.


🌸 SYNOPSIS 🌸

aa-enforce <executable> [<executable> ...] [-d /path/to/profiles]
            [--no-reload]

πŸ’œ OPTIONS πŸ’œ

  • -d --dir / path/to/profiles β€” tells it where to go looking for the AppArmor security profile set. like, where's the profile closet bestie. if you don't say anything it defaults to /etc/apparmor.d πŸ—‚οΈ
  • --no-reload β€” do not reload the profile after modifying it. you changed it, you're just not reloading it. bold move, iconic, but that's the deal πŸ’…

πŸ¦‹ DESCRIPTION πŸ¦‹

so aa-enforce is the tool you use to set one or more profiles to enforce mode. that's the whole vibe check ✨

the tea is: this command is only relevant in conjunction with the aa-complain utility β€” which sets a profile to complain mode β€” and the aa-disable utility β€” which unloads and disables a profile. the three of them are a little trio fr fr 🫢

and here's the part that matters: the default mode for a security policy is enforce. so nothing needs to be turned on β€” you have to run the aa-complain utility to change that behavior. enforce is the main character energy that just exists by default πŸ‘‘


πŸ’€ BUGS πŸ’€

if you find any bugs (and bestie, we all find bugs 😭), please report them at <https://gitlab.com/apparmor/apparmor/-/issues>. put it in the group chat, they'll handle it πŸ™ˆ


🌈 SEE ALSO 🌈

go read these next, i'm obsessed:


lowkey a reminder: aa-enforce puts profiles into enforce mode β€” it doesn't take them out. that's literally the other tools' job, go bother them 🧚

okay that's the whole page, you ate that πŸ“ mwah πŸ’–

sign-off time: this gem came from AppArmor 4.1.7, dated 2026-05-19 β€” that's the AA-ENFORCE(8) page, section 8, source AppArmor, and yes i remembered the date so you don't have to 😌✨

πŸ“¦ where this page comes from