DOKK / manpages / debian 10 / apparmor / aa-remove-unknown.8.en
AA-REMOVE-UNKNOWN(8) AppArmor AA-REMOVE-UNKNOWN(8)

aa-remove-unknown - remove unknown AppArmor profiles

aa-remove-unknown [option]

aa-remove-unknown will inventory all profiles in /etc/apparmor.d/, compare that list to the profiles currently loaded into the kernel, and then remove all of the loaded profiles that were not found in /etc/apparmor.d/. It will also report the name of each profile that it removes on standard out.

displays a short usage statement.
dry run; only prints the names of profiles that would be removed

  $ sudo ./aa-remove-unknown -n
  Would remove 'test//null-/usr/bin/whoami'
  Would remove 'test'
  $ sudo ./aa-remove-unknown
  Removing 'test//null-/usr/bin/whoami'
  Removing 'test'

None. Please report any you find to Launchpad at <https://bugs.launchpad.net/apparmor/+filebug>.

apparmor(7)

2019-03-30 AppArmor 2.13.2