AA-STATUS
NAMESYNOPSIS
DESCRIPTION
OPTIONS
BUGS
SEE ALSO
NAME
aa−status − display various information about the current AppArmor policy.
SYNOPSIS
aa-status [option]
DESCRIPTION
aa-status will report various aspects of the current state of AppArmor confinement. By default, it displays the same information as if the −−verbose argument were given. A sample of what this looks like is:
apparmor module is loaded. 110 profiles are loaded. 102 profiles are in enforce mode. 8 profiles are in complain mode. Out of 129 processes running: 13 processes have profiles defined. 8 processes have profiles in enforce mode. 5 processes have profiles in complain mode.
Other argument options are provided to report individual aspects, to support being used in scripts.
OPTIONS
aa-status
accepts only one argument at a time out of:
−−enabled
returns error code if AppArmor is not enabled.
−−profiled
displays the number of loaded AppArmor policies.
−−enforced
displays the number of loaded enforcing AppArmor policies.
−−complaining
displays the number of loaded non-enforcing AppArmor policies.
−−verbose
displays multiple data points about loaded AppArmor policy set (the default action if no arguments are given).
−−help
displays a short usage statement.
BUGS
aa-status must be run as root to read the state of the loaded policy from the apparmor module. It uses the /proc filesystem to determine which processes are confined and so is susceptible to race conditions.
Upon exiting, aa-status will set its return value to the following values:
|
0 |
if apparmor is enabled and policy is loaded. | ||
|
1 |
if apparmor is not enabled/loaded. | ||
|
2 |
if apparmor is enabled but no policy is loaded. | ||
|
3 |
if the apparmor control files aren’t available under /sys/kernel/security/. | ||
|
4 |
if the user running the script doesn’t have enough privileges to read the apparmor control files. |
If you find any additional bugs, please report them at <https://bugs.launchpad.net/apparmor/+filebug>.
SEE ALSO
apparmor(7), apparmor.d(5), and <http://wiki.apparmor.net>.
More Linux Commands
manpages/Tcl_LimitGetTime.3.html
Tcl_LimitGetTime(3) - manage and check resource limits on in
Tcls interpreter resource limit subsystem allows for close control over how much computation time a script may use, and is useful for cases where a program is d
manpages/islessgreater.3.html
islessgreater(3) - floating-point relational tests without e
The normal relation operations (like <, less than) will fail if one of the operands is NaN. This will cause an exception. To avoid this, C99 defines the macros
manpages/fb.modes.5.html
fb.modes(5) - frame buffer modes file - Linux manual page...
/etc/fb.modes contains an unlimited number of video mode descriptions. The general format of a video mode is: mode geometry <xres> <yres> <vxres> <vyres> <depth
manpages/pam_timestamp.8.html
pam_timestamp(8) - Authenticate using cached successful auth
pam_timestamp.8 - In a nutshell, pam_timestamp caches successful authentication attempts, and allows you to use a recent successful attempt as the basis for aut
manpages/XrmQuarkToString.3.html
XrmQuarkToString(3) - manipulate resource quarks (Man Page)
The XrmUniqueQuark function allocates a quark that is guaranteed not to represent any string that is known to the resource manager. These functions can be used
manpages/tunelp.8.html
tunelp(8) - set various parameters for the lp device........
tunelp sets several parameters for the /dev/lp? devices, for better performance (or for any performance at all, if your printer wont work without it...) Without
manpages/tcflush.3.html
tcflush(3) - get and set terminal attributes, line control,
The termios functions describe a general terminal interface that is provided to control asynchronous communications ports. The termios structure Many of the fun
manpages/vtysh.1.html
vtysh(1) - a integrated shell for Quagga routing software...
vtysh is a integrated shell for Quagga routing engine. OPTIONS Options available for the vtysh command: -b, --boot Execute boot startup configuration. It makes
manpages/XListFonts.3.html
XListFonts(3) - obtain or free font names and information...
The XListFonts function returns an array of available font names (as controlled by the font search path; see XSetFontPath) that match the string you passed to t
manpages/sigqueue.2.html
sigqueue(2) - queue a signal and data to a process (ManPage)
sigqueue() sends the signal specified in sig to the process whose PID is given in pid. The permissions required to send a signal are the same as for kill(2). As
manpages/fieldlines.1.html
fieldlines(1) - simulation of the electric field lines betwe
From Terry Walsh (http://reallyslick.com): This is a simulation of the electric field lines between charged particles. Physics never looked so good. Ported to L
manpages/lreverse.n.html
lreverse(n) - Reverse the order of a list - Linux man page
The lreverse command returns a list that has the same elements as its input list, list, except with the elements in the reverse order. EXAMPLES lreverse {a a b
