# aa-unconfined

> List processes with open TCP/UDP ports that do not have AppArmor profiles loaded.
> More information: <https://gitlab.com/apparmor/apparmor/-/wikis/manpage_aa-unconfined.8>.

- List unconfined processes using the `ss` command (default):

`sudo aa-unconfined`

- Use `netstat` instead of `ss` to detect open network sockets:

`sudo aa-unconfined --with-netstat`

- Show all processes from /proc with TCP/UDP ports and no AppArmor profiles (more detailed):

`sudo aa-unconfined --paranoid`

- Display help:

`aa-unconfined {{[-h|--help]}}`