aa−status − display various information about the current AppArmor policy.


aa-status [option]


aa-status will report various aspects of the current state of AppArmor confinement. By default, it displays the same information as if the −−verbose argument were given. A sample of what this looks like is:

  apparmor module is loaded.
  110 profiles are loaded.
  102 profiles are in enforce mode.
  8 profiles are in complain mode.
  Out of 129 processes running:
  13 processes have profiles defined.
  8 processes have profiles in enforce mode.
  5 processes have profiles in complain mode.

Other argument options are provided to report individual aspects, to support being used in scripts.


aa-status accepts only one argument at a time out of:

returns error code if AppArmor is not enabled.


displays the number of loaded AppArmor policies.


displays the number of loaded enforcing AppArmor policies.


displays the number of loaded non-enforcing AppArmor policies.


displays multiple data points about loaded AppArmor policy set (the default action if no arguments are given).


displays a short usage statement.


aa-status must be run as root to read the state of the loaded policy from the apparmor module. It uses the /proc filesystem to determine which processes are confined and so is susceptible to race conditions.

Upon exiting, aa-status will set its return value to the following values:


if apparmor is enabled and policy is loaded.


if apparmor is not enabled/loaded.


if apparmor is enabled but no policy is loaded.


if the apparmor control files aren’t available under /sys/kernel/security/.


if the user running the script doesn’t have enough privileges to read the apparmor control files.

If you find any additional bugs, please report them at <https://bugs.launchpad.net/apparmor/+filebug>.


apparmor(7), apparmor.d(5), and <http://wiki.apparmor.net>.

More Linux Commands

Tcl_LimitGetTime(3) - manage and check resource limits on in
Tcls interpreter resource limit subsystem allows for close control over how much computation time a script may use, and is useful for cases where a program is d

islessgreater(3) - floating-point relational tests without e
The normal relation operations (like &lt;, less than) will fail if one of the operands is NaN. This will cause an exception. To avoid this, C99 defines the macros

fb.modes(5) - frame buffer modes file - Linux manual page...
/etc/fb.modes contains an unlimited number of video mode descriptions. The general format of a video mode is: mode geometry &lt;xres&gt; &lt;yres&gt; &lt;vxres&gt; &lt;vyres&gt; &lt;depth

pam_timestamp(8) - Authenticate using cached successful auth
pam_timestamp.8 - In a nutshell, pam_timestamp caches successful authentication attempts, and allows you to use a recent successful attempt as the basis for aut

XrmQuarkToString(3) - manipulate resource quarks (Man Page)
The XrmUniqueQuark function allocates a quark that is guaranteed not to represent any string that is known to the resource manager. These functions can be used

tunelp(8) - set various parameters for the lp device........
tunelp sets several parameters for the /dev/lp? devices, for better performance (or for any performance at all, if your printer wont work without it...) Without

tcflush(3) - get and set terminal attributes, line control,
The termios functions describe a general terminal interface that is provided to control asynchronous communications ports. The termios structure Many of the fun

vtysh(1) - a integrated shell for Quagga routing software...
vtysh is a integrated shell for Quagga routing engine. OPTIONS Options available for the vtysh command: -b, --boot Execute boot startup configuration. It makes

XListFonts(3) - obtain or free font names and information...
The XListFonts function returns an array of available font names (as controlled by the font search path; see XSetFontPath) that match the string you passed to t

sigqueue(2) - queue a signal and data to a process (ManPage)
sigqueue() sends the signal specified in sig to the process whose PID is given in pid. The permissions required to send a signal are the same as for kill(2). As

fieldlines(1) - simulation of the electric field lines betwe
From Terry Walsh (http://reallyslick.com): This is a simulation of the electric field lines between charged particles. Physics never looked so good. Ported to L

lreverse(n) - Reverse the order of a list - Linux man page
The lreverse command returns a list that has the same elements as its input list, list, except with the elements in the reverse order. EXAMPLES lreverse {a a b

We can't live, work or learn in freedom unless the software we use is free.