aa-cleanprof - clean an existing AppArmor security profile.
aa-cleanprof <executable> [<executable> ...] [-d /path/to/profiles] [--no-reload] [-s]
-d --dir /path/to/profiles
Specifies where to look for the AppArmor security profile set. Defaults to /etc/apparmor.d.
Do not reload the profile after modifying it.
Silently overwrites the profile without user prompt.
aa-cleanprof is used to perform a cleanup on one or more profiles. The tool removes any existing superfluous rules (rules that are covered under an include or another rule), reorders the rules to group similar rules together and removes all comments from the file.
If you find any bugs, please report them at <https://gitlab.com/apparmor/apparmor/-/issues>.
apparmor(7), apparmor.d(5), aa-enforce(1), aa-complain(1), aa-disable(1), aa_change_hat(2), and <https://wiki.apparmor.net>.