aa-remove-unknown - remove unknown AppArmor profiles
Contents
Bugs
None. Please report any you find to Gitlab at <https://gitlab.com/apparmor/apparmor/-/issues>.
Description
aa-remove-unknown will inventory all profiles in /etc/apparmor.d/, compare that list to the profiles currently loaded into the kernel, and then remove all of the loaded profiles that were not found in /etc/apparmor.d/. It will also report the name of each profile that it removes on standard out.
Examples
$ sudo ./aa-remove-unknown -n
Would remove 'test//null-/usr/bin/whoami'
Would remove 'test'
$ sudo ./aa-remove-unknown
Removing 'test//null-/usr/bin/whoami'
Removing 'test'
Name
aa-remove-unknown - remove unknown AppArmor profiles
Options
-h, --help
displays a short usage statement.
-n dry run; only prints the names of profiles that would be removed
See Also
apparmor(7) AppArmor 5.0.0~alpha1 2025-08-19 AA-REMOVE-UNKNOWN(8)
Synopsis
aa-remove-unknown [option]
