aa_change_profile(9)

💫 aa_change_profile(9) 💫

okay so bestie, welcome to the Kernel API Manual — yes we're in kernel land today, and yes this page is a whole vibe. it's aa_change_profile(9) and it's giving "one-way trip, no refunds" 🎀

---

🦋 SYNOPSIS

int aa_change_profile (const char *fqname , int flags );

---

✨ ARGUMENTS

• fqname — the name of the profile, and heads up, it may include a namespace. also: it's <italic>NOT NULL</italic>, so like… don't even try it 🙈
• flags — the flags that affect how the change behaves 🧚

---

💅 DESCRIPTION

okay so the whole point: this changes you to a new profile name. and here's the tea — unlike with hats, there is no way to change back. one-way transition, periodt. 🔥

if the name isn't specified, the current profile name is used. and if onexec then the transition is delayed until the next exec. iykyk ⭐

it returns 0 on success, and an error otherwise. that's it, that's the whole deal 💖

---

🌈 SEE ALSO

like, go read the kernel file ./security/apparmor/domain.c and also these iconic little friends:

• may_change_ptraced_domain(9)
• label_compound_match(9)
• label_components_match(9)
• label_match(9)
• change_profile_perms(9)
• aa_xattrs_match(9)
• find_attach(9)
• x_table_lookup(9)
• x_to_label(9)
• apparmor_bprm_creds_for_exec(9)
• aa_change_hat(9)

---

ngl bestie, remember the no-take-backs energy on this one. there's no "undo" button here 💀

---

and that's a wrap! this page lives in ./security/apparmor, dated October 2026 — stay slay, stay secure, mwah 🫶🦋💜