aa-cleanprof

Clean a profile to remove unused rules

$ sudo aa-cleanprof [profile_name]

$ sudo aa-cleanprof [profile1] [profile2]

$ sudo aa-cleanprof -d /path/to/profiles [profile_name]

$ sudo aa-cleanprof -s [profile_name]

$ sudo aa-cleanprof --no-reload [profile_name]

aa-cleanprof executable [executable ...] [-d /path/to/profiles] [--no-reload] [-s]

aa-cleanprof removes superfluous rules from AppArmor security profiles, including rules that are already covered by an include directive or another rule. The utility also reorders rules to group similar ones together and removes all comments from the profile file.

-d, --dir /path/to/profiles

Specifies the directory containing AppArmor profiles; defaults to /etc/apparmor.d

Prevents the profile from being reloaded after modifications

Automatically overwrites the profile without prompting the user

Display help information

This utility removes all comments from profile files, which may eliminate useful documentation or notes within the profiles.

Part of the AppArmor utilities package for managing application security profiles on Linux systems.

aa-enforce(8), aa-complain(8), aa-disable(8), aa-genprof(8), apparmor(7)