aa-remove-unknown

Perform a dry run to see which profiles would be removed

$ sudo aa-remove-unknown -n

$ sudo aa-remove-unknown

aa-remove-unknown [-n]

aa-remove-unknown removes AppArmor profiles that are currently loaded in the kernel but no longer have corresponding profile files in the configuration directory (/etc/apparmor.d). This helps clean up orphaned profiles after packages are removed or profiles are deleted.

-n, --dry-run

Show which profiles would be removed without actually removing them

Display help information

Running without the -n flag will immediately unload orphaned profiles from the kernel. Use dry-run first to verify which profiles will be affected.

Part of the AppArmor utilities package for managing application security profiles on Linux systems.

aa-status(8), aa-disable(8), apparmor(7)