aa-unconfined8

Usage

Options

--paranoid

Displays all processes visible from /proc filesystem, and whether they are confined by a profile or "not confined". Equivalent to --show=all.

--show=(all|network|server|client)

Determines the set of processes to be displayed.

--show=all show all processes is equivalent to --paranoid

--show=network show only process with any sockets open.

--show=server show only processes with listening sockets open. This is the default value if --show= or --paranoid are not specified.

--show=client show only processes with non-listening sockets open.

--with-ss

Use the ss(8) command to find processes listening on network sockets (the default).

--with-netstat

Use the netstat(8) command to find processes listening on network sockets. This is also what aa-unconfined will fall back to when ss(8) is not available.

Overview

aa-unconfined will use netstat(8) to determine which processes have open network sockets and do not have AppArmor profiles loaded into the kernel.