man-pages/man8/aa-status.8.html
2021-03-31 01:06:50 +01:00

167 lines
3.8 KiB
HTML

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<HTML><HEAD><TITLE>Man page of AA-STATUS</TITLE>
</HEAD><BODY>
<H1>AA-STATUS</H1>
Section: AppArmor (8)<BR>Updated: 2020-05-19<BR><A HREF="#index">Index</A>
<A HREF="/cgi-bin/man/man2html">Return to Main Contents</A><HR>
<A NAME="lbAB">&nbsp;</A>
<H2>NAME</H2>
aa-status - display various information about the current AppArmor
policy.
<A NAME="lbAC">&nbsp;</A>
<H2>SYNOPSIS</H2>
<B>aa-status</B> [option]
<A NAME="lbAD">&nbsp;</A>
<H2>DESCRIPTION</H2>
<B>aa-status</B> will report various aspects of the current state of
AppArmor confinement. By default, it displays the same information as if
the <I>--verbose</I> argument were given. A sample of what this looks like
is:
<P>
<PRE>
apparmor module is loaded.
110 profiles are loaded.
102 profiles are in enforce mode.
8 profiles are in complain mode.
Out of 129 processes running:
13 processes have profiles defined.
8 processes have profiles in enforce mode.
5 processes have profiles in complain mode.
</PRE>
<P>
Other argument options are provided to report individual aspects, to
support being used in scripts.
<A NAME="lbAE">&nbsp;</A>
<H2>OPTIONS</H2>
<B>aa-status</B> accepts only one argument at a time out of:
<DL COMPACT>
<DT id="1">--enabled<DD>
returns error code if AppArmor is not enabled.
<DT id="2">--profiled<DD>
displays the number of loaded AppArmor policies.
<DT id="3">--enforced<DD>
displays the number of loaded enforcing AppArmor policies.
<DT id="4">--complaining<DD>
displays the number of loaded non-enforcing AppArmor policies.
<DT id="5">--verbose<DD>
displays multiple data points about loaded AppArmor policy
set (the default action if no arguments are given).
<DT id="6">--json<DD>
displays multiple data points about loaded AppArmor policy
set in a <FONT SIZE="-1">JSON</FONT> format, fit for machine consumption.
<DT id="7">--pretty-json<DD>
same as --json, formatted to be readable by humans as well
as by machines.
<DT id="8">--help<DD>
displays a short usage statement.
</DL>
<A NAME="lbAF">&nbsp;</A>
<H2>EXIT STATUS</H2>
Upon exiting, <B>aa-status</B> will set its exit status to the
following values:
<DL COMPACT>
<DT id="9"><B>0</B><DD>
if apparmor is enabled and policy is loaded.
<DT id="10"><B>1</B><DD>
if apparmor is not enabled/loaded.
<DT id="11"><B>2</B><DD>
if apparmor is enabled but no policy is loaded.
<DT id="12"><B>3</B><DD>
if the apparmor control files aren't available under /sys/kernel/security/.
<DT id="13"><B>4</B><DD>
if the user running the script doesn't have enough privileges to read
the apparmor control files.
</DL>
<A NAME="lbAG">&nbsp;</A>
<H2>BUGS</H2>
<B>aa-status</B> must be run as root to read the state of the loaded
policy from the apparmor module. It uses the /proc filesystem to determine
which processes are confined and so is susceptible to race conditions.
<P>
If you find any additional bugs, please report them at
&lt;<A HREF="https://bugs.launchpad.net/apparmor/+filebug">https://bugs.launchpad.net/apparmor/+filebug</A>&gt;.
<A NAME="lbAH">&nbsp;</A>
<H2>SEE ALSO</H2>
<B><A HREF="/cgi-bin/man/man2html?7+apparmor">apparmor</A></B>(7), <B><A HREF="/cgi-bin/man/man2html?5+apparmor.d">apparmor.d</A></B>(5), and
&lt;<A HREF="https://wiki.apparmor.net">https://wiki.apparmor.net</A>&gt;.
<P>
<HR>
<A NAME="index">&nbsp;</A><H2>Index</H2>
<DL>
<DT id="14"><A HREF="#lbAB">NAME</A><DD>
<DT id="15"><A HREF="#lbAC">SYNOPSIS</A><DD>
<DT id="16"><A HREF="#lbAD">DESCRIPTION</A><DD>
<DT id="17"><A HREF="#lbAE">OPTIONS</A><DD>
<DT id="18"><A HREF="#lbAF">EXIT STATUS</A><DD>
<DT id="19"><A HREF="#lbAG">BUGS</A><DD>
<DT id="20"><A HREF="#lbAH">SEE ALSO</A><DD>
</DL>
<HR>
This document was created by
<A HREF="/cgi-bin/man/man2html">man2html</A>,
using the manual pages.<BR>
Time: 00:06:10 GMT, March 31, 2021
</BODY>
</HTML>