AA-DECODE(8) AppArmor AA-DECODE(8)

# [NAME](#NAME)

aa-decode - decode hex-encoded in AppArmor log files

# [SYNOPSIS](#SYNOPSIS)

**aa-decode** \[option] <HEX STRING>

# [DESCRIPTION](#DESCRIPTION)

**aa-decode** will decode hex-encoded strings as seen in AppArmor log output. It will also take an audit log on standard input and convert any hex-encoded AppArmor log entries and display them on standard output.

# [OPTIONS](#OPTIONS)

[--help](#help)

displays a short usage statement.

# [EXAMPLES](#EXAMPLES)

```
  $ aa-decode 2F746D702F666F6F20626172
  Decoded: /tmp/foo bar
  $ cat /var/log/kern.log | aa-decode
  ... denied_mask="r::" fsuid=1000 ouid=1000 name=/tmp/foo bar
```

# [BUGS](#BUGS)

None. Please report any you find to gitlab at <https://gitlab.com/apparmor/apparmor/-/issues>.

# [SEE ALSO](#SEE_ALSO)

[**apparmor**(7)](/man/enterprise-packages/apparmor-utils/apparmor.7)

2026-10-26 AppArmor 5.0.2

---

Document: aa-decode(8) from apparmor-utils 5.0.2-r3 (Chainguard OS)
Source: https://gitlab.com/apparmor/apparmor.git