AA-AUDIT(8) AppArmor AA-AUDIT(8)

# [NAME](#NAME)

aa-audit - set an AppArmor security profile to audit mode.

# [SYNOPSIS](#SYNOPSIS)

**aa-audit *<executable>* \[*<executable>* ...] \[*-d /path/to/profiles*] \[*--no-reload*] \[*-r*]**

# [OPTIONS](#OPTIONS)

**-d --dir /path/to/profiles**

```
   Specifies where to look for the AppArmor security profile set.
   Defaults to /etc/apparmor.d.
```

**--no-reload**  
Do not reload the profile after modifying it.

**-r --remove**

```
   Removes the audit mode for the profile.
```

# [DESCRIPTION](#DESCRIPTION)

**aa-audit** is used to set one or more profiles to audit mode. In this mode security policy is enforced and all access (successes and failures) are logged to the system log.

The *--remove* option can be used to remove the audit mode for the profile.

# [BUGS](#BUGS)

If you find any bugs, please report them at <https://gitlab.com/apparmor/apparmor/-/issues>.

# [SEE ALSO](#SEE_ALSO)

[**apparmor**(7)](/man/enterprise-packages/apparmor-utils/apparmor.7), [**apparmor.d**(5)](/man/enterprise-packages/apparmor-utils/apparmor.d.5), [**aa-enforce**(1)](/man/enterprise-packages/apparmor-utils/aa-enforce.1), [**aa-complain**(1)](/man/enterprise-packages/apparmor-utils/aa-complain.1), [**aa-disable**(1)](/man/enterprise-packages/apparmor-utils/aa-disable.1), [**aa\_change\_hat**(2)](/man/enterprise-packages/apparmor-utils/aa_change_hat.2), and <https://wiki.apparmor.net>.

2026-09-13 AppArmor 5.0.2

---

Document: aa-audit(8) from apparmor-utils 5.0.2-r2 (Chainguard OS)
Source: https://gitlab.com/apparmor/apparmor.git