aa-complain

Set policy to complain mode

$ sudo aa-complain [path/to/profile1 path/to/profile2 ...]

$ sudo aa-complain --dir [path/to/profiles]

aa-complain <executable> [<executable> ...] [-d /path/to/profiles] [--no-reload]

-d --dir /path/to/profiles

Specifies where to look for the AppArmor security profile set. Defaults to /etc/apparmor.d.

--no-reload Do not reload the profile after modifying it.

aa-complain is used to set the enforcement mode for one or more profiles to complain mode. In this mode security policy is not enforced but rather access violations are logged to the system log.

Note that 'deny' rules will be enforced even in complain mode.

If you find any bugs, please report them at <https://gitlab.com/apparmor/apparmor/-/issues>.

apparmor (7), apparmor.d (5), aa-enforce (1), aa-disable (1), aa_change_hat (2), and <https://wiki.apparmor.net>.