167 lines
3.8 KiB
HTML
167 lines
3.8 KiB
HTML
|
|
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
|
|
<HTML><HEAD><TITLE>Man page of AA-STATUS</TITLE>
|
|
</HEAD><BODY>
|
|
<H1>AA-STATUS</H1>
|
|
Section: AppArmor (8)<BR>Updated: 2020-05-19<BR><A HREF="#index">Index</A>
|
|
<A HREF="/cgi-bin/man/man2html">Return to Main Contents</A><HR>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
<A NAME="lbAB"> </A>
|
|
<H2>NAME</H2>
|
|
|
|
aa-status - display various information about the current AppArmor
|
|
policy.
|
|
<A NAME="lbAC"> </A>
|
|
<H2>SYNOPSIS</H2>
|
|
|
|
|
|
|
|
<B>aa-status</B> [option]
|
|
<A NAME="lbAD"> </A>
|
|
<H2>DESCRIPTION</H2>
|
|
|
|
|
|
|
|
<B>aa-status</B> will report various aspects of the current state of
|
|
AppArmor confinement. By default, it displays the same information as if
|
|
the <I>--verbose</I> argument were given. A sample of what this looks like
|
|
is:
|
|
<P>
|
|
|
|
|
|
|
|
<PRE>
|
|
apparmor module is loaded.
|
|
110 profiles are loaded.
|
|
102 profiles are in enforce mode.
|
|
8 profiles are in complain mode.
|
|
Out of 129 processes running:
|
|
13 processes have profiles defined.
|
|
8 processes have profiles in enforce mode.
|
|
5 processes have profiles in complain mode.
|
|
|
|
</PRE>
|
|
|
|
|
|
<P>
|
|
|
|
Other argument options are provided to report individual aspects, to
|
|
support being used in scripts.
|
|
<A NAME="lbAE"> </A>
|
|
<H2>OPTIONS</H2>
|
|
|
|
|
|
|
|
<B>aa-status</B> accepts only one argument at a time out of:
|
|
<DL COMPACT>
|
|
<DT id="1">--enabled<DD>
|
|
|
|
|
|
returns error code if AppArmor is not enabled.
|
|
<DT id="2">--profiled<DD>
|
|
|
|
|
|
displays the number of loaded AppArmor policies.
|
|
<DT id="3">--enforced<DD>
|
|
|
|
|
|
displays the number of loaded enforcing AppArmor policies.
|
|
<DT id="4">--complaining<DD>
|
|
|
|
|
|
displays the number of loaded non-enforcing AppArmor policies.
|
|
<DT id="5">--verbose<DD>
|
|
|
|
|
|
displays multiple data points about loaded AppArmor policy
|
|
set (the default action if no arguments are given).
|
|
<DT id="6">--json<DD>
|
|
|
|
|
|
displays multiple data points about loaded AppArmor policy
|
|
set in a <FONT SIZE="-1">JSON</FONT> format, fit for machine consumption.
|
|
<DT id="7">--pretty-json<DD>
|
|
|
|
|
|
same as --json, formatted to be readable by humans as well
|
|
as by machines.
|
|
<DT id="8">--help<DD>
|
|
|
|
|
|
displays a short usage statement.
|
|
</DL>
|
|
<A NAME="lbAF"> </A>
|
|
<H2>EXIT STATUS</H2>
|
|
|
|
|
|
|
|
Upon exiting, <B>aa-status</B> will set its exit status to the
|
|
following values:
|
|
<DL COMPACT>
|
|
<DT id="9"><B>0</B><DD>
|
|
|
|
|
|
if apparmor is enabled and policy is loaded.
|
|
<DT id="10"><B>1</B><DD>
|
|
|
|
|
|
if apparmor is not enabled/loaded.
|
|
<DT id="11"><B>2</B><DD>
|
|
|
|
|
|
if apparmor is enabled but no policy is loaded.
|
|
<DT id="12"><B>3</B><DD>
|
|
|
|
|
|
if the apparmor control files aren't available under /sys/kernel/security/.
|
|
<DT id="13"><B>4</B><DD>
|
|
|
|
|
|
if the user running the script doesn't have enough privileges to read
|
|
the apparmor control files.
|
|
</DL>
|
|
<A NAME="lbAG"> </A>
|
|
<H2>BUGS</H2>
|
|
|
|
|
|
|
|
<B>aa-status</B> must be run as root to read the state of the loaded
|
|
policy from the apparmor module. It uses the /proc filesystem to determine
|
|
which processes are confined and so is susceptible to race conditions.
|
|
<P>
|
|
|
|
If you find any additional bugs, please report them at
|
|
<<A HREF="https://bugs.launchpad.net/apparmor/+filebug">https://bugs.launchpad.net/apparmor/+filebug</A>>.
|
|
<A NAME="lbAH"> </A>
|
|
<H2>SEE ALSO</H2>
|
|
|
|
|
|
|
|
<B><A HREF="/cgi-bin/man/man2html?7+apparmor">apparmor</A></B>(7), <B><A HREF="/cgi-bin/man/man2html?5+apparmor.d">apparmor.d</A></B>(5), and
|
|
<<A HREF="https://wiki.apparmor.net">https://wiki.apparmor.net</A>>.
|
|
<P>
|
|
|
|
<HR>
|
|
<A NAME="index"> </A><H2>Index</H2>
|
|
<DL>
|
|
<DT id="14"><A HREF="#lbAB">NAME</A><DD>
|
|
<DT id="15"><A HREF="#lbAC">SYNOPSIS</A><DD>
|
|
<DT id="16"><A HREF="#lbAD">DESCRIPTION</A><DD>
|
|
<DT id="17"><A HREF="#lbAE">OPTIONS</A><DD>
|
|
<DT id="18"><A HREF="#lbAF">EXIT STATUS</A><DD>
|
|
<DT id="19"><A HREF="#lbAG">BUGS</A><DD>
|
|
<DT id="20"><A HREF="#lbAH">SEE ALSO</A><DD>
|
|
</DL>
|
|
<HR>
|
|
This document was created by
|
|
<A HREF="/cgi-bin/man/man2html">man2html</A>,
|
|
using the manual pages.<BR>
|
|
Time: 00:06:10 GMT, March 31, 2021
|
|
</BODY>
|
|
</HTML>
|