aa−enabled − test whether AppArmor is enabled
aa-enabled [options]
aa-enabled is used to determine if AppArmor is enabled.
aa-enabled
accepts the following arguments:
−h, −−help
Display a brief usage guide.
−q, −−quiet
Do not output anything to stdout. This option is intended to be used by scripts that simply want to use the exit code to determine if AppArmor is enabled.
−x, −−exclusive
Require AppArmor to have exclusive access to shared LSM interfaces to be considered enabled.
Upon exiting, aa-enabled will set its exit status to the following values:
0 |
if AppArmor is enabled. | ||
1 |
if AppArmor is not enabled/loaded. | ||
2 |
intentionally not used as an aa-enabled exit status. | ||
3 |
if the AppArmor control files aren’t available under /sys/kernel/security/. | ||
4 |
if aa-enabled doesn’t have enough privileges to read the apparmor control files. | ||
10 |
AppArmor is enabled but does not have access to shared LSM interfaces. | ||
64 |
if any unexpected error or condition is encountered. |
If you find any bugs, please report them at <https://gitlab.com/apparmor/apparmor/−/issues>.
apparmor(7), apparmor.d(5), aa_is_enabled(2), and <https://wiki.apparmor.net>.