NAME
aa-enforce - set an AppArmor security profile to enforce mode from being disabled or complain mode.
SYNOPSIS
aa-enforce <executable> [<executable> ...] [-d /path/to/profiles]
OPTIONS
-d --dir / path/to/profiles
Specifies where to look for the AppArmor security profile set.
Defaults to /etc/apparmor.d.
DESCRIPTION
aa-enforce is used to set one or more profiles to enforce mode. This command is only relevant in conjunction with the aa-complain utility which sets a profile to complain mode and the aa-disable utility which unloads and disables a profile. The default mode for a security policy is enforce and the aa-complain utility must be run to change this behavior.
BUGS
If you find any bugs, please report them at <https://bugs.launchpad.net/apparmor/+filebug>.
SEE ALSO
apparmor(7), apparmor.d(5), aa-complain(1), aa-disable(1), aa_change_hat(2), and <http://wiki.apparmor.net>.
More Linux Commands
manpages/rvnamed-ng.8.html
rvnamed-ng(8) reverse name resolution daemon for iptraf(8)
rvnamed is a supplementary program distributed with iptraf. This is a reverse name resolution daemon used by iptraf to resolve IP addresses to host names in the
manpages/XtWindowToWidget.3.html
XtWindowToWidget(3) - translating strings to widgets or widg
The XtNameToWidget function looks for a widget whose name is the first component in the specified names and that is a pop-up child of reference (or a normal chi
manpages/sd_is_socket_inet.3.html
sd_is_socket_inet(3) - Check the type of a file descriptor
sd_is_fifo() may be called to check whether the specified file descriptor refers to a FIFO or pipe. If the path parameter is not NULL, it is checked whether the
manpages/XSetRegion.3.html
XSetRegion(3) - create or destroy regions - Linux man page
The XCreateRegion function creates a new empty region. The XSetRegion function sets the clip-mask in the GC to the specified region. The region is specified rel
manpages/iso_8859_1.7.html
iso_8859_1(7) - ISO 8859-1 character set encoded in octal, d
The ISO 8859 standard includes several 8-bit extensions to the ASCII character set (also known as ISO 646-IRV). Especially important is ISO 8859-1, the Latin Al
manpages/glStencilFunc.3gl.html
glStencilFunc(3gl) - set function and reference value for st
glStencilFunc.3gl - Stenciling, like depth-buffering, enables and disables drawing on a per-pixel basis. You draw into the stencil planes using GL drawing primi
manpages/glColor4ui.3gl.html
glColor4ui(3gl) - set the current color - Linux manual page
The GL stores both a current single-valued color index and a current four-valued RGBA color. glColor sets a new four-valued RGBA color. glColor has two major va
manpages/argv0.n.html
argv0(n) Variables used by Tcl _____________________________
The following global variables are created and managed automatically by the Tcl library. Except where noted below, these variables should normally be treated as
manpages/ip-addrlabel.8.html
ip-addrlabel(8) protocol address label management (ManPage)
IPv6 address labels are used for address selection; they are described in RFC 3484. Precedence is managed by userspace, and only the label itself is stored in t
manpages/systool.1.html
systool(1) - view system device information by bus, class, a
Calling systool without parameters will present all available bus types, device classes, and root devices. When device is supplied, the information reqested by
manpages/Xfontcache.3.html
Xfontcache(3) - X-TrueType font cache extension client libra
FontCache is an extension that is used by X-TrueType to cache informations about fonts. FontCacheQueryExtension returns True if the FontCache extension is avail
manpages/gnutls_x509_crq_get_extension_by_oid.3.html
gnutls_x509_crq_get_extension_by_oid(3) - API function......
gnutls_x509_crq_get_extension_by_oid.3 - This function will return the extension specified by the OID in the certificate. The extensions will be returned as bin
