aa-disable

aa-disable executable [executable ...] [-d /path/to/profiles] [--no-reload]

aa-disable is used to disable one or more AppArmor profiles. This command will unload the profile from the kernel and prevent the profile from being loaded on AppArmor startup.A symbolic link to the profile is created in /etc/apparmor.d/disable/, which keeps the profile from being loaded automatically when AppArmor is restarted. The profile file itself remains in /etc/apparmor.d but is not active. Use aa-enforce or aa-complain to re-enable a disabled profile.

-d, --dir /path/to/profiles

Specifies the directory containing AppArmor profiles; defaults to /etc/apparmor.d

Do not reload the profile after modifying it

Disabling a profile removes security protections for the associated application. The application will run without AppArmor confinement until the profile is re-enabled.

Part of the AppArmor utilities package for managing application security profiles on Linux systems.

aa-enforce(8), aa-complain(8), aa-remove-unknown(8), aa-status(8), apparmor(7)

Source code · Homepage · Documentation