aa-enabled (1) Linux Manual Page
aa-enabled – test whether AppArmor is enabled
Synopsis
aa-enabled [options]Description
aa-enabled is used to determine if AppArmor is enabled.Options
aa-enabled accepts the following arguments:- -h, –help
- Display a brief usage guide.
- -q, –quiet
- Do not output anything to stdout. This option is intended to be used by scripts that simply want to use the exit code to determine if AppArmor is enabled.
- -x, –exclusive
- Require AppArmor to have exclusive access to shared LSM interfaces to be considered enabled.
Exit Status
Upon exiting, aa-enabled will set its exit status to the following values:- 0
- if AppArmor is enabled.
- 1
- if AppArmor is not enabled/loaded.
- 2
- intentionally not used as an aa-enabled exit status.
- 3
- if the AppArmor control files aren’t available under /sys/kernel/security/.
- 4
- if aa-enabled doesn’t have enough privileges to read the apparmor control files.
- 10
- AppArmor is enabled but does not have access to shared LSM interfaces.
- 64
- if any unexpected error or condition is encountered.