aa-enabled - test whether AppArmor is enabled
aa-enabled is used to determine if AppArmor is enabled.
aa-enabled accepts the following arguments:
- -h, --help
- Display a brief usage guide.
- -q, --quiet
- Do not output anything to stdout. This option is intended to be used by scripts that simply want to use the exit code to determine if AppArmor is enabled.
- -x, --exclusive
- Require AppArmor to have exclusive access to shared LSM interfaces to be considered enabled.
Upon exiting, aa-enabled will set its exit status to the following values:
- if AppArmor is enabled.
- if AppArmor is not enabled/loaded.
- intentionally not used as an aa-enabled exit status.
- if the AppArmor control files aren't available under /sys/kernel/security/.
- if aa-enabled doesn't have enough privileges to read the apparmor control files.
- AppArmor is enabled but does not have access to shared LSM interfaces.
- if any unexpected error or condition is encountered.
If you find any bugs, please report them at https://gitlab.com/apparmor/apparmor/-/issues.