Arch manual pages

AA-ENABLED(1) AppArmor AA-ENABLED(1)

aa-enabled - test whether AppArmor is enabled

aa-enabled [options]

aa-enabled is used to determine if AppArmor is enabled.

aa-enabled accepts the following arguments:
-h, --help
Display a brief usage guide.
-q, --quiet
Do not output anything to stdout. This option is intended to be used by scripts that simply want to use the exit code to determine if AppArmor is enabled.
-x, --exclusive
Require AppArmor to have exclusive access to shared LSM interfaces to be considered enabled.

Upon exiting, aa-enabled will set its exit status to the following values:
0
if AppArmor is enabled.
1
if AppArmor is not enabled/loaded.
2
intentionally not used as an aa-enabled exit status.
3
if the AppArmor control files aren't available under /sys/kernel/security/.
4
if aa-enabled doesn't have enough privileges to read the apparmor control files.
10
AppArmor is enabled but does not have access to shared LSM interaces.
64
if any unexpected error or condition is encountered.

If you find any bugs, please report them at https://gitlab.com/apparmor/apparmor/-/issues.

apparmor(7), apparmor.d(5), aa_is_enabled(2), and https://wiki.apparmor.net.
2020-10-01 AppArmor 3.0.0