aa-remove-unknown - remove unknown AppArmor profiles
aa-remove-unknown will inventory all profiles in /etc/apparmor.d/, compare that list to the profiles currently loaded into the kernel, and then remove all of the loaded profiles that were not found in /etc/apparmor.d/. It will also report the name of each profile that it removes on standard out.
$ sudo ./aa-remove-unknown -n Would remove 'test//null-/usr/bin/whoami' Would remove 'test' $ sudo ./aa-remove-unknown Removing 'test//null-/usr/bin/whoami' Removing 'test'
None. Please report any you find to Gitlab at https://gitlab.com/apparmor/apparmor/-/issues.