aa-remove-unknown(8) - man - phpman

Che Dong

Remove AppArmor profiles that are no longer present in the configuration directory.

Perform a dry run to see which profiles would be removed
sudo aa-remove-unknown -n
Actually remove the profiles
sudo aa-remove-unknown
Display help
aa-remove-unknown {{-h|--help}}

AA-REMOVE-UNKNOWN(8)                          AppArmor                          AA-REMOVE-UNKNOWN(8)



NAME
       aa-remove-unknown - remove unknown AppArmor profiles

SYNOPSIS
       aa-remove-unknown [option]

DESCRIPTION
       aa-remove-unknown will inventory all profiles in /etc/apparmor.d/, compare that list to the
       profiles currently loaded into the kernel, and then remove all of the loaded profiles that
       were not found in /etc/apparmor.d/. It will also report the name of each profile that it
       removes on standard out.

OPTIONS
       -h, --help
           displays a short usage statement.

       -n  dry run; only prints the names of profiles that would be removed

EXAMPLES
         $ sudo ./aa-remove-unknown -n
         Would remove 'test//null-/usr/bin/whoami'
         Would remove 'test'

         $ sudo ./aa-remove-unknown
         Removing 'test//null-/usr/bin/whoami'
         Removing 'test'

BUGS
       None. Please report any you find to Gitlab at
       <https://gitlab.com/apparmor/apparmor/-/issues>.

SEE ALSO
       apparmor(7)



AppArmor 3.0.4                               2025-08-15                         AA-REMOVE-UNKNOWN(8)