Provided by: apparmor-utils_3.0.7-1ubuntu2_all
NAME
aa-audit - set an AppArmor security profile to audit mode.
SYNOPSIS
aa-audit <executable> [<executable> ...] [-d /path/to/profiles] [--no-reload] [-r]
OPTIONS
-d --dir /path/to/profiles Specifies where to look for the AppArmor security profile set. Defaults to /etc/apparmor.d. --no-reload Do not reload the profile after modifying it. -r --remove Removes the audit mode for the profile.
DESCRIPTION
aa-audit is used to set one or more profiles to audit mode. In this mode security policy is enforced and all access (successes and failures) are logged to the system log. The --remove option can be used to remove the audit mode for the profile.
BUGS
If you find any bugs, please report them at <https://gitlab.com/apparmor/apparmor/-/issues>.
SEE ALSO
apparmor(7), apparmor.d(5), aa-enforce(1), aa-complain(1), aa-disable(1), aa_change_hat(2), and <https://wiki.apparmor.net>.