aa_free_profile(9)

💖 aa_free_profile(9) 💖

okay so this page is from the Kernel API Manual, and it's giving "cleanup era" energy fr fr. No cap, it's about freeing a profile and all its little besties.

✨ NAME ✨

aa_free_profile — free a profile 🫶

🫶 SYNOPSIS 🫶

void aa_free_profile (struct aa_profile *profile );

🙈 ARGUMENTS 🙈

• profile — the profile to free (MAYBE NULL) 🙈

💅 DESCRIPTION 💅

It frees a profile, its hats and null_profile. Like, all of them. The whole little squad. 💖

All references to the profile, its hats and null_profile must have been put before this runs — every single reference, no leftovers, periodt. ✨

⚠️ If the profile was referenced from a task context, free_profile will be called from an rcu callback routine, so we must not sleep here. That's the vibe check you literally cannot fail. 😭

🌈 SEE ALSO 🌈

Kernel file ./security/apparmor/policy.c is the home base, and these are the linked besties:

• aa_pdb_free_kref(9)
• __add_profile(9)
• __list_remove_profile(9)
• __remove_profile(9)
• __aa_profile_list_release(9)
• aa_free_data(9)
• aa_alloc_profile(9)
• __strn_find_child(9)
• __find_child(9)
• aa_find_child(9)
• __lookup_parent(9)
• __create_missing_ancestors(9)
• __lookupn_profile(9)
• aa_lookupn_profile(9)
• __aa_new_learning_profile(9)
• replacement_allowed(9)
• audit_policy(9)
• aa_policy_view_capable(9)
• aa_may_manage_policy(9)
• __replace_profile(9)
• __lookup_replace(9)
• aa_replace_profiles(9)
• aa_remove_profiles(9)

mwah 💋 — source/version: ./security/apparmor, dated October 2026 ✨