.\" -*- mode: troff; coding: utf-8 -*- .\" Automatically generated by Pod::Man 5.01 (Pod::Simple 3.43) .\" .\" Standard preamble: .\" ======================================================================== .de Sp \" Vertical space (when we can't use .PP) .if t .sp .5v .if n .sp .. .de Vb \" Begin verbatim text .ft CW .nf .ne \\$1 .. .de Ve \" End verbatim text .ft R .fi .. .\" \*(C` and \*(C' are quotes in nroff, nothing in troff, for use with C<>. .ie n \{\ . ds C` "" . ds C' "" 'br\} .el\{\ . ds C` . ds C' 'br\} .\" .\" Escape single quotes in literal strings from groff's Unicode transform. .ie \n(.g .ds Aq \(aq .el .ds Aq ' .\" .\" If the F register is >0, we'll generate index entries on stderr for .\" titles (.TH), headers (.SH), subsections (.SS), items (.Ip), and index .\" entries marked with X<> in POD. Of course, you'll have to process the .\" output yourself in some meaningful fashion. .\" .\" Avoid warning from groff about undefined register 'F'. .de IX .. .nr rF 0 .if \n(.g .if rF .nr rF 1 .if (\n(rF:(\n(.g==0)) \{\ . if \nF \{\ . de IX . tm Index:\\$1\t\\n%\t"\\$2" .. . if !\nF==2 \{\ . nr % 0 . nr F 2 . \} . \} .\} .rr rF .\" ======================================================================== .\" .IX Title "AA-ENFORCE 8" .TH AA-ENFORCE 8 2024-03-25 "AppArmor 3.0.13" AppArmor .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l .nh .SH NAME aa\-enforce \- set an AppArmor security profile to enforce mode from being disabled or complain mode. .SH SYNOPSIS .IX Header "SYNOPSIS" \&\fBaa-enforce \fR\f(BI\fR\fB [\fR\f(BI\fR\fB ...] [\fR\f(BI\-d /path/to/profiles\fR\fB] [\fR\f(BI\-\-no\-reload\fR\fB]\fR .SH OPTIONS .IX Header "OPTIONS" \&\fB\-d \-\-dir / path/to/profiles\fR .PP .Vb 2 \& Specifies where to look for the AppArmor security profile set. \& Defaults to /etc/apparmor.d. .Ve .PP \&\fB\-\-no\-reload\fR Do not reload the profile after modifying it. .SH DESCRIPTION .IX Header "DESCRIPTION" \&\fBaa-enforce\fR is used to set one or more profiles to \fIenforce\fR mode. This command is only relevant in conjunction with the \fIaa-complain\fR utility which sets a profile to complain mode and the \fIaa-disable\fR utility which unloads and disables a profile. The default mode for a security policy is enforce and the \fIaa-complain\fR utility must be run to change this behavior. .SH BUGS .IX Header "BUGS" If you find any bugs, please report them at . .SH "SEE ALSO" .IX Header "SEE ALSO" \&\fBapparmor\fR\|(7), \fBapparmor.d\fR\|(5), \fBaa\-complain\fR\|(1), \fBaa\-disable\fR\|(1), \&\fBaa_change_hat\fR\|(2), and .