1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
|
.\" -*- mode: troff; coding: utf-8 -*-
.\" Automatically generated by Pod::Man 5.01 (Pod::Simple 3.43)
.\"
.\" Standard preamble:
.\" ========================================================================
.de Sp \" Vertical space (when we can't use .PP)
.if t .sp .5v
.if n .sp
..
.de Vb \" Begin verbatim text
.ft CW
.nf
.ne \\$1
..
.de Ve \" End verbatim text
.ft R
.fi
..
.\" \*(C` and \*(C' are quotes in nroff, nothing in troff, for use with C<>.
.ie n \{\
. ds C` ""
. ds C' ""
'br\}
.el\{\
. ds C`
. ds C'
'br\}
.\"
.\" Escape single quotes in literal strings from groff's Unicode transform.
.ie \n(.g .ds Aq \(aq
.el .ds Aq '
.\"
.\" If the F register is >0, we'll generate index entries on stderr for
.\" titles (.TH), headers (.SH), subsections (.SS), items (.Ip), and index
.\" entries marked with X<> in POD. Of course, you'll have to process the
.\" output yourself in some meaningful fashion.
.\"
.\" Avoid warning from groff about undefined register 'F'.
.de IX
..
.nr rF 0
.if \n(.g .if rF .nr rF 1
.if (\n(rF:(\n(.g==0)) \{\
. if \nF \{\
. de IX
. tm Index:\\$1\t\\n%\t"\\$2"
..
. if !\nF==2 \{\
. nr % 0
. nr F 2
. \}
. \}
.\}
.rr rF
.\" ========================================================================
.\"
.IX Title "AA-REMOVE-UNKNOWN 8"
.TH AA-REMOVE-UNKNOWN 8 2025-04-08 "AppArmor 4.1.0" AppArmor
.\" For nroff, turn off justification. Always turn off hyphenation; it makes
.\" way too many mistakes in technical documents.
.if n .ad l
.nh
.SH NAME
aa\-remove\-unknown \- remove unknown AppArmor profiles
.SH SYNOPSIS
.IX Header "SYNOPSIS"
\&\fBaa-remove-unknown\fR [option]
.SH DESCRIPTION
.IX Header "DESCRIPTION"
\&\fBaa-remove-unknown\fR will inventory all profiles in /etc/apparmor.d/, compare
that list to the profiles currently loaded into the kernel, and then remove all
of the loaded profiles that were not found in /etc/apparmor.d/. It will also
report the name of each profile that it removes on standard out.
.SH OPTIONS
.IX Header "OPTIONS"
.IP "\-h, \-\-help" 4
.IX Item "-h, --help"
displays a short usage statement.
.IP \-n 4
.IX Item "-n"
dry run; only prints the names of profiles that would be removed
.SH EXAMPLES
.IX Header "EXAMPLES"
.Vb 3
\& $ sudo ./aa\-remove\-unknown \-n
\& Would remove \*(Aqtest//null\-/usr/bin/whoami\*(Aq
\& Would remove \*(Aqtest\*(Aq
\&
\& $ sudo ./aa\-remove\-unknown
\& Removing \*(Aqtest//null\-/usr/bin/whoami\*(Aq
\& Removing \*(Aqtest\*(Aq
.Ve
.SH BUGS
.IX Header "BUGS"
None. Please report any you find to Gitlab at
<https://gitlab.com/apparmor/apparmor/\-/issues>.
.SH "SEE ALSO"
.IX Header "SEE ALSO"
\&\fBapparmor\fR\|(7)
|
