NAME

aa_is_enabled - determine if apparmor is available

aa_find_mountpoint - find where the apparmor interface filesystem is mounted

SYNOPSIS

#include <sys/apparmor.h>

int aa_is_enabled(void);

int aa_find_mountpoint(char **mnt);

Link with -lapparmor when compiling.

DESCRIPTION

The aa_is_enabled function returns true (1) if apparmor is enabled. If it isn't it sets the errno(3) to reflect the reason it is not enabled and returns 0.

The aa_find_mountpoint function finds where the apparmor filesystem is mounted on the system, and returns a string containing the mount path. It is the caller's responsibility to free(3) the returned path.

RETURN VALUE

aa_is_enabled On success 1 is returned. On error, 0 is returned, and errno(3) is set appropriately.

aa_find_mountpoint On success zero is returned. On error, -1 is returned, and errno(3) is set appropriately.

ERRORS

aa_is_enabled

ENOSYS: AppArmor extensions to the system are not available.
ECANCELED: AppArmor is available on the system but has been disabled at boot.
EBUSY: AppArmor is available but only via private interfaces.
ENOENT: AppArmor is available (and maybe even enforcing policy) but the interface is not available.
ENOMEM: Insufficient memory was available.
EPERM: Did not have sufficient permissions to determine if AppArmor is enabled.
EACCES: Did not have sufficient permissions to determine if AppArmor is enabled.
EBUSY: AppArmor is enabled but does not have access to shared interfaces, and only private interfaces are available.

aa_find_mountpoint

ENOMEM: Insufficient memory was available.
EACCES: Access to the required paths was denied.
ENOENT: The apparmor filesystem mount could not be found

BUGS

None known. If you find any, please report them at <https://gitlab.com/apparmor/apparmor/-/issues>.