root@bob:~# aa-status
apparmor module is loaded.
72 profiles are loaded.
34 profiles are in enforce mode.
   /sbin/dhclient
   /usr/bin/freshclam
   /usr/bin/lxc-start
   /usr/bin/man
   /usr/bin/pidgin
   /usr/bin/pidgin//launchpad_integration
   /usr/bin/pidgin//sanitized_helper
   /usr/bin/totem
   /usr/bin/totem-audio-preview
   /usr/bin/totem-video-thumbnailer
   /usr/lib/NetworkManager/nm-dhcp-client.action
   /usr/lib/NetworkManager/nm-dhcp-helper
   /usr/lib/chromium-browser/chromium-browser//browser_java
   /usr/lib/chromium-browser/chromium-browser//browser_openjdk
   /usr/lib/chromium-browser/chromium-browser//sanitized_helper
   /usr/lib/connman/scripts/dhclient-script
   /usr/lib/snapd/snap-confine
   /usr/lib/snapd/snap-confine//mount-namespace-capture-helper
   /usr/sbin/apt-cacher-ng
   /usr/sbin/clamd
   /usr/sbin/haveged
   /usr/sbin/named
   /usr/sbin/ntpd
   /usr/sbin/php-fpm7.2
   /usr/sbin/php-fpm7.2//web1
   /usr/sbin/php-fpm7.2//web2
   /usr/sbin/tcpdump
   gst_plugin_scanner
   lxc-container-default
   lxc-container-default-cgns
   lxc-container-default-with-mounting
   lxc-container-default-with-nesting
   man_filter
   man_groff
38 profiles are in complain mode.
   /usr/bin/irssi
   /usr/lib/chromium-browser/chromium-browser
   /usr/lib/chromium-browser/chromium-browser//chromium_browser_sandbox
   /usr/lib/chromium-browser/chromium-browser//lsb_release
   /usr/lib/chromium-browser/chromium-browser//xdgsettings
   /usr/lib/dovecot/anvil
   /usr/lib/dovecot/auth
   /usr/lib/dovecot/config
   /usr/lib/dovecot/deliver
   /usr/lib/dovecot/dict
   /usr/lib/dovecot/dovecot-auth
   /usr/lib/dovecot/dovecot-lda
   /usr/lib/dovecot/dovecot-lda///usr/sbin/sendmail
   /usr/lib/dovecot/imap
   /usr/lib/dovecot/imap-login
   /usr/lib/dovecot/lmtp
   /usr/lib/dovecot/log
   /usr/lib/dovecot/managesieve
   /usr/lib/dovecot/managesieve-login
   /usr/lib/dovecot/pop3
   /usr/lib/dovecot/pop3-login
   /usr/lib/dovecot/ssl-params
   /usr/sbin/avahi-daemon
   /usr/sbin/dnsmasq
   /usr/sbin/dnsmasq//libvirt_leaseshelper
   /usr/sbin/dovecot
   /usr/sbin/identd
   /usr/sbin/mdnsd
   /usr/sbin/nmbd
   /usr/sbin/nscd
   /usr/sbin/smbd
   /usr/sbin/smbldap-useradd
   /usr/sbin/smbldap-useradd///etc/init.d/nscd
   /usr/{sbin/traceroute,bin/traceroute.db}
   klogd
   ping
   syslog-ng
   syslogd
15 processes have profiles defined.
11 processes are in enforce mode.
   /usr/bin/freshclam (888)
   /usr/sbin/clamd (930)
   /usr/sbin/haveged (656)
   /usr/sbin/named (866)
   /usr/sbin/php-fpm7.2 (871)
   /usr/sbin/php-fpm7.2 (1161)
   /usr/sbin/php-fpm7.2 (1162)
   /usr/sbin/php-fpm7.2//web1 (1157)
   /usr/sbin/php-fpm7.2//web1 (1158)
   /usr/sbin/php-fpm7.2//web2 (1159)
   /usr/sbin/php-fpm7.2//web2 (1160)
4 processes are in complain mode.
   /usr/lib/dovecot/anvil (965)
   /usr/lib/dovecot/config (975)
   /usr/lib/dovecot/log (966)
   /usr/sbin/dovecot (899)
0 processes are unconfined but have a profile defined.