AppArmor Modes

complain/learning

In complain or learning mode, violations of AppArmor profile rules, such as the profiled program accessing files not permitted by the profile, are detected. The violations are permitted, but also logged. This mode is convenient for developing profiles and is used by the AppArmor tools for generating profiles.

enforce

Loading a profile in enforcement mode enforces the policy defined in the profile as well as reports policy violation attempts to syslogd.