AppArmor question - denied_mask="d"

Hi!

Which means denied_mask="d"?

I can't find nothing about it int the web.

Only this:

r - read
w - write -- conflicts with append
a - append -- conflicts with write
ux - unconfined execute
Ux - unconfined execute -- scrub the environment
px - discrete profile execute
Px - discrete profile execute -- scrub the environment
cx - transition to subprofile on execute
Cx - transition to subprofile on execute -- scrub the environment
ix - inherit execute
m - allow PROT_EXEC with mmap(2) calls
l - link
k - lock

I ask this because AppArmor shows a warning on a program with
denied_mask="d"

My question has been resolved.

It is w(write).