AA-ENFORCE(8) AppArmor AA-ENFORCE(8)

# [NAME](#NAME)

aa-enforce - set an AppArmor security profile to enforce mode from being disabled or complain mode.

# [SYNOPSIS](#SYNOPSIS)

**aa-enforce *<executable>* \[*<executable>* ...] \[*-d /path/to/profiles*] \[*--no-reload*]**

# [OPTIONS](#OPTIONS)

**-d --dir / path/to/profiles**

```
   Specifies where to look for the AppArmor security profile set.
   Defaults to /etc/apparmor.d.
```

**--no-reload**  
Do not reload the profile after modifying it.

# [DESCRIPTION](#DESCRIPTION)

**aa-enforce** is used to set one or more profiles to *enforce* mode. This command is only relevant in conjunction with the *aa-complain* utility which sets a profile to complain mode and the *aa-disable* utility which unloads and disables a profile. The default mode for a security policy is enforce and the *aa-complain* utility must be run to change this behavior.

# [BUGS](#BUGS)

If you find any bugs, please report them at <https://gitlab.com/apparmor/apparmor/-/issues>.

# [SEE ALSO](#SEE_ALSO)

[**apparmor**(7)](/man/enterprise-packages/apparmor-utils/apparmor.7), [**apparmor.d**(5)](/man/enterprise-packages/apparmor-utils/apparmor.d.5), [**aa-complain**(1)](/man/enterprise-packages/apparmor-utils/aa-complain.1), [**aa-disable**(1)](/man/enterprise-packages/apparmor-utils/aa-disable.1), [**aa\_change\_hat**(2)](/man/enterprise-packages/apparmor-utils/aa_change_hat.2), and <https://wiki.apparmor.net>.

2026-10-26 AppArmor 5.0.2

---

Document: aa-enforce(8) from apparmor-utils 5.0.2-r3 (Chainguard OS)
Source: https://gitlab.com/apparmor/apparmor.git