---
name: "aa-audit"
section: "8"
platform: "linux"
package: "apparmor"
version: "4.1.8-2"
release: "Arch Linux 2026-11-01"
platforms: ["linux"]
url: "https://new.carta.tech/aa-audit"
---

# aa-audit(8)

set an AppArmor security profile to audit mode.

## NAME

aa-audit - set an AppArmor security profile to audit mode.

## SYNOPSIS

**aa-audit** ***\<executable\>*** **\[*****\<executable\>*** **...\] \[*****-d /path/to/profiles*****\] \[*****--no-reload*****\] \[*****-r*****\]**

## OPTIONS

**-d --dir  /path/to/profiles**

```
   Specifies where to look for the AppArmor security profile set.
   Defaults to /etc/apparmor.d.
```

**--no-reload**\
    Do not reload the profile after modifying it.

**-r --remove**

```
   Removes the audit mode for the profile.
```

## DESCRIPTION

**aa-audit** is used to set one or more profiles to audit mode. In this mode security policy is enforced and all access (successes and failures) are logged to the system log.

The *--remove* option can be used to remove the audit mode for the profile.

## BUGS

If you find any bugs, please report them at \<https://gitlab.com/apparmor/apparmor/-/issues\>.

## SEE ALSO

[**apparmor**(7)](/apparmor/7.md), [**apparmor.d**(5)](/apparmor.d/5.md), **aa-enforce**(1), **aa-complain**(1), **aa-disable**(1), [**aa\_change\_hat**(2)](/aa_change_hat/2.md), and \<https://wiki.apparmor.net\>.