Linux command
aa-enforce 命令
安全
May affect permissions or system state. Check the target first.
命令示例
Enable
sudo aa-enforce [path/to/profile]
Example
sudo aa-enforce [path/to/profile1] [path/to/profile2]
Example
sudo aa-enforce -d [path/to/profiles]
说明
aa-enforce sets one or more AppArmor security profiles to enforce mode, which is the default and most secure mode. In enforce mode, security policy is strictly applied and any access violations are blocked and logged. This command reverses the effects of aa-complain (which sets complain mode) and aa-disable (which unloads profiles).
参数
- -d, --dir /path/to/profiles
- Specifies the directory containing AppArmor profiles; defaults to /etc/apparmor.d
- --no-reload
- Do not reload the profile after modifying it
FAQ
What is the aa-enforce command used for?
aa-enforce sets one or more AppArmor security profiles to enforce mode, which is the default and most secure mode. In enforce mode, security policy is strictly applied and any access violations are blocked and logged. This command reverses the effects of aa-complain (which sets complain mode) and aa-disable (which unloads profiles).
How do I run a basic aa-enforce example?
Run `sudo aa-enforce [path/to/profile]` in a terminal, then adjust file names, paths, flags, or remote targets for your system.
What does -d, --dir /path/to/profiles do in aa-enforce?
Specifies the directory containing AppArmor profiles; defaults to /etc/apparmor.d