When an AppArmor profile is placed into complain mode, actions that would violate the profile's rules are logged but not blocked, allowing an administrator to observe an application's actual behavior before switching the profile to enforce mode. This is conceptually similar to SELinux's permissive mode. The aa-genprof and aa-logprof tools can process these complain-mode logs to help build or refine a profile, but complain mode itself does not automatically generate profiles.