aa-status(8)
Display the current AppArmor security profile status and loaded policy information.
Synopsis
aa-status [OPTION]Description
aa-status reports on the current AppArmor security policy status, including which profiles are loaded, in what mode (enforce or complain), and whether AppArmor itself is enabled. It provides a quick overview of active security policies protecting the system.
This utility is essential for verifying AppArmor is running correctly and for checking which applications have active security profiles. Output shows profiles grouped by enforcement mode and indicates if any processes are unconfined.
Common options
| Flag | What it does |
|---|---|
--enabled | Return exit code 0 if AppArmor is enabled, 1 if disabled (for scripts) |
--verbose | Show detailed output including per-mode statistics and profile counts |
--json | Output status in JSON format (if supported by your AppArmor version) |
--profiled | Show only profiles that confine processes (processes currently running under profiles) |
--enforced | Show only profiles in enforce mode |
--complaining | Show only profiles in complain mode |
--full | Display full profile path names instead of abbreviated names |
-h, --help | Display help message and exit |
Examples
Display the current AppArmor status and list all loaded profiles by mode
aa-statusCheck if AppArmor is enabled and print a status message
aa-status --enabled && echo 'AppArmor is active' || echo 'AppArmor is inactive'Show detailed statistics including number of enforced and complaining profiles
aa-status --verboseList the first 20 profiles running in enforce mode
aa-status --enforced | head -20Show only profiles that are currently confining active processes
aa-status --profiledExtract information about processes under AppArmor profiles
sudo aa-status 2>/dev/null | grep -A 5 'processes'