AA-ENABLED(1) AppArmor AA-ENABLED(1)

# [NAME](#NAME)

aa-enabled - test whether AppArmor is enabled

# [SYNOPSIS](#SYNOPSIS)

**aa-enabled** \[options]

# [DESCRIPTION](#DESCRIPTION)

**aa-enabled** is used to determine if AppArmor is enabled.

# [OPTIONS](#OPTIONS)

**aa-enabled** accepts the following arguments:

[-h, --help](#h,)

Display a brief usage guide.

[-q, --quiet](#q,)

Do not output anything to stdout. This option is intended to be used by scripts that simply want to use the exit code to determine if AppArmor is enabled.

[-x, --exclusive](#x,)

Require AppArmor to have exclusive access to shared LSM interfaces to be considered enabled.

# [EXIT STATUS](#EXIT_STATUS)

Upon exiting, **aa-enabled** will set its exit status to the following values:

**0**

if AppArmor is enabled.

**1**

if AppArmor is not enabled/loaded.

**2**

intentionally not used as an **aa-enabled** exit status.

**3**

if the AppArmor control files aren't available under /sys/kernel/security/.

**4**

if **aa-enabled** doesn't have enough privileges to read the apparmor control files.

**10**

AppArmor is enabled but does not have access to shared LSM interfaces.

**64**

if any unexpected error or condition is encountered.

# [BUGS](#BUGS)

If you find any bugs, please report them at <https://gitlab.com/apparmor/apparmor/-/issues>.

# [SEE ALSO](#SEE_ALSO)

[**apparmor**(7)](/man/enterprise-packages/apparmor-binutils/apparmor.7), [**apparmor.d**(5)](/man/enterprise-packages/apparmor-binutils/apparmor.d.5), [**aa\_is\_enabled**(2)](/man/enterprise-packages/apparmor-binutils/aa_is_enabled.2), and <https://wiki.apparmor.net>.

2026-09-13 AppArmor 5.0.2

---

Document: aa-enabled(1) from apparmor-binutils 5.0.2-r2 (Chainguard OS)
Source: https://gitlab.com/apparmor/apparmor.git