AA-REMOVE-UNKNOWN(8) AppArmor AA-REMOVE-UNKNOWN(8)

# [NAME](#NAME)

aa-remove-unknown - remove unknown AppArmor profiles

# [SYNOPSIS](#SYNOPSIS)

**aa-remove-unknown** \[option]

# [DESCRIPTION](#DESCRIPTION)

**aa-remove-unknown** will inventory all profiles in /etc/apparmor.d/, compare that list to the profiles currently loaded into the kernel, and then remove all of the loaded profiles that were not found in /etc/apparmor.d/. It will also report the name of each profile that it removes on standard out.

# [OPTIONS](#OPTIONS)

[-h, --help](#h,)

displays a short usage statement.

[-n](#n)

dry run; only prints the names of profiles that would be removed

# [EXAMPLES](#EXAMPLES)

```
  $ sudo ./aa-remove-unknown -n
  Would remove 'test//null-/usr/bin/whoami'
  Would remove 'test'
  $ sudo ./aa-remove-unknown
  Removing 'test//null-/usr/bin/whoami'
  Removing 'test'
```

# [BUGS](#BUGS)

None. Please report any you find to Gitlab at <https://gitlab.com/apparmor/apparmor/-/issues>.

# [SEE ALSO](#SEE_ALSO)

[**apparmor**(7)](/man/enterprise-packages/apparmor-utils/apparmor.7)

2026-10-26 AppArmor 5.0.2

---

Document: aa-remove-unknown(8) from apparmor-utils 5.0.2-r3 (Chainguard OS)
Source: https://gitlab.com/apparmor/apparmor.git