1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
|
.\" -*- mode: troff; coding: utf-8 -*-
.\" Automatically generated by Pod::Man 5.01 (Pod::Simple 3.43)
.\"
.\" Standard preamble:
.\" ========================================================================
.de Sp \" Vertical space (when we can't use .PP)
.if t .sp .5v
.if n .sp
..
.de Vb \" Begin verbatim text
.ft CW
.nf
.ne \\$1
..
.de Ve \" End verbatim text
.ft R
.fi
..
.\" \*(C` and \*(C' are quotes in nroff, nothing in troff, for use with C<>.
.ie n \{\
. ds C` ""
. ds C' ""
'br\}
.el\{\
. ds C`
. ds C'
'br\}
.\"
.\" Escape single quotes in literal strings from groff's Unicode transform.
.ie \n(.g .ds Aq \(aq
.el .ds Aq '
.\"
.\" If the F register is >0, we'll generate index entries on stderr for
.\" titles (.TH), headers (.SH), subsections (.SS), items (.Ip), and index
.\" entries marked with X<> in POD. Of course, you'll have to process the
.\" output yourself in some meaningful fashion.
.\"
.\" Avoid warning from groff about undefined register 'F'.
.de IX
..
.nr rF 0
.if \n(.g .if rF .nr rF 1
.if (\n(rF:(\n(.g==0)) \{\
. if \nF \{\
. de IX
. tm Index:\\$1\t\\n%\t"\\$2"
..
. if !\nF==2 \{\
. nr % 0
. nr F 2
. \}
. \}
.\}
.rr rF
.\" ========================================================================
.\"
.IX Title "AA-ENABLED 1"
.TH AA-ENABLED 1 2025-04-08 "AppArmor 4.1.0" AppArmor
.\" For nroff, turn off justification. Always turn off hyphenation; it makes
.\" way too many mistakes in technical documents.
.if n .ad l
.nh
.SH NAME
aa\-enabled \- test whether AppArmor is enabled
.SH SYNOPSIS
.IX Header "SYNOPSIS"
\&\fBaa-enabled\fR [options]
.SH DESCRIPTION
.IX Header "DESCRIPTION"
\&\fBaa-enabled\fR is used to determine if AppArmor is enabled.
.SH OPTIONS
.IX Header "OPTIONS"
\&\fBaa-enabled\fR accepts the following arguments:
.IP "\-h, \-\-help" 4
.IX Item "-h, --help"
Display a brief usage guide.
.IP "\-q, \-\-quiet" 4
.IX Item "-q, --quiet"
Do not output anything to stdout. This option is intended to be used by
scripts that simply want to use the exit code to determine if AppArmor is
enabled.
.IP "\-x, \-\-exclusive" 4
.IX Item "-x, --exclusive"
Require AppArmor to have exclusive access to shared LSM interfaces to
be considered enabled.
.SH "EXIT STATUS"
.IX Header "EXIT STATUS"
Upon exiting, \fBaa-enabled\fR will set its exit status to the following values:
.IP \fB0\fR 4
.IX Item "0"
if AppArmor is enabled.
.IP \fB1\fR 4
.IX Item "1"
if AppArmor is not enabled/loaded.
.IP \fB2\fR 4
.IX Item "2"
intentionally not used as an \fBaa-enabled\fR exit status.
.IP \fB3\fR 4
.IX Item "3"
if the AppArmor control files aren't available under /sys/kernel/security/.
.IP \fB4\fR 4
.IX Item "4"
if \fBaa-enabled\fR doesn't have enough privileges to read the apparmor control files.
.IP \fB10\fR 4
.IX Item "10"
AppArmor is enabled but does not have access to shared LSM interfaces.
.IP \fB64\fR 4
.IX Item "64"
if any unexpected error or condition is encountered.
.SH BUGS
.IX Header "BUGS"
If you find any bugs, please report them at
<https://gitlab.com/apparmor/apparmor/\-/issues>.
.SH "SEE ALSO"
.IX Header "SEE ALSO"
\&\fBapparmor\fR\|(7), \fBapparmor.d\fR\|(5), \fBaa_is_enabled\fR\|(2), and <https://wiki.apparmor.net>.
|
