AA-ENFORCE(8)
π AA-ENFORCE(8) β the AppArmor one β¨
okay so real talk, this is a page from the AppArmor manual set (section 8, sysadmin commands, iykyk) and honestly? it's short, it's sweet, and it's about to make your profiles behave. let's go π
β¨ NAME β¨
aa-enforce β the glow-up button for an AppArmor security profile: it flips a profile into enforce mode, pulling it out of being disabled or stuck in complain mode. periodt.
πΈ SYNOPSIS πΈ
aa-enforce <executable> [<executable> ...] [-d /path/to/profiles]
[--no-reload]
π OPTIONS π
-d --dir / path/to/profilesβ tells it where to go looking for the AppArmor security profile set. like, where's the profile closet bestie. if you don't say anything it defaults to/etc/apparmor.dποΈ--no-reloadβ do not reload the profile after modifying it. you changed it, you're just not reloading it. bold move, iconic, but that's the deal π
π¦ DESCRIPTION π¦
so aa-enforce is the tool you use to set one or more profiles to enforce mode. that's the whole vibe check β¨
the tea is: this command is only relevant in conjunction with the aa-complain utility β which sets a profile to complain mode β and the aa-disable utility β which unloads and disables a profile. the three of them are a little trio fr fr π«Ά
and here's the part that matters: the default mode for a security policy is enforce. so nothing needs to be turned on β you have to run the aa-complain utility to change that behavior. enforce is the main character energy that just exists by default π
π BUGS π
if you find any bugs (and bestie, we all find bugs π), please report them at <https://gitlab.com/apparmor/apparmor/-/issues>. put it in the group chat, they'll handle it π
π SEE ALSO π
go read these next, i'm obsessed:
apparmor(7)apparmor.d(5)aa-complain(1)aa-disable(1)aa_change_hat(2)- and <https://wiki.apparmor.net> β
lowkey a reminder: aa-enforce puts profiles into enforce mode β it doesn't take them out. that's literally the other tools' job, go bother them π§
okay that's the whole page, you ate that π mwah π
sign-off time: this gem came from AppArmor 4.1.7, dated 2026-05-19 β that's the AA-ENFORCE(8) page, section 8, source AppArmor, and yes i remembered the date so you don't have to πβ¨
π¦ where this page comes from
- opensuse-leap 16.0: apparmor-utils 4.1.7-160000.2.1 Β· GPL-2.0-only AND LGPL-2.1-or-later
- π girlified by deepseek-ai/DeepSeek-V4.1-Flash-1017 on : a language model's rewrite of the original, under its terms