2025-07-24 22:27:13 -06:00
|
|
|
# aa-unconfined
|
|
|
|
|
|
|
|
|
|
> List processes with open TCP/UDP ports that do not have AppArmor profiles loaded.
|
|
|
|
|
> More information: <https://gitlab.com/apparmor/apparmor/-/wikis/manpage_aa-unconfined.8>.
|
|
|
|
|
|
|
|
|
|
- List unconfined processes using the `ss` command (default):
|
|
|
|
|
|
|
|
|
|
`sudo aa-unconfined`
|
|
|
|
|
|
|
|
|
|
- Use `netstat` instead of `ss` to detect open network sockets:
|
|
|
|
|
|
|
|
|
|
`sudo aa-unconfined --with-netstat`
|
|
|
|
|
|
2026-06-12 17:51:25 -06:00
|
|
|
- Show all processes from `/proc` with TCP/UDP ports and no AppArmor profiles (more detailed):
|
2025-07-24 22:27:13 -06:00
|
|
|
|
|
|
|
|
`sudo aa-unconfined --paranoid`
|
|
|
|
|
|
|
|
|
|
- Display help:
|
|
|
|
|
|
|
|
|
|
`aa-unconfined {{[-h|--help]}}`
|
