AA-DECODE(8)
π AA-DECODE π
okay bestie, so this is aa-decode from the AppArmor manual, section 8 (that's the sysadmin/systemy crew, iykyk). it's the lil glow-up your hex-garbled log lines have been waiting for π
β¨ NAME β¨
aa-decode β decode hex-encoded stuff you find chillin' in AppArmor log files π¦
β¨ SYNOPSIS β¨
aa-decode [option] <HEX STRING>
β¨ DESCRIPTION β¨
so like, aa-decode will decode hex-encoded strings β the exact kind you see staring back at you in AppArmor log output π no more squinting at 2F746D702F666F6F, we're decoding that immediately, no cap.
and that's not even all of it, bestie. it will also take an audit log on standard input and convert any hex-encoded AppArmor log entries, then display them on standard output. the way that it just... handles the whole log for you? main character energy fr fr π
β¨ OPTIONS β¨
--helpβ displays a short usage statement. like when you just need the vibe check, not the whole saga π
π EXAMPLES π
decode a hex string straight up: β
$ aa-decode 2F746D702F666F6F20626172
Decoded: /tmp/foo bar
or pipe a whole log through it and watch the hex transform in real time π§
$ cat /var/log/kern.log | aa-decode
... denied_mask="r::" fsuid=1000 ouid=1000 name=/tmp/foo bar
not me being obsessed with how clean that output is π
π BUGS π
None. literally none, we're thriving πΈ
but if you do find one (and like, respect for trying), please report it to gitlab at <https://gitlab.com/apparmor/apparmor/-/issues> β slide into their issues tab, they wanna know π«Ά
π SEE ALSO π
k bye ily, this was the aa-decode(8) page β brought to you by AppArmor 6.0.0~alpha1, dated 2026-10-05. mwah πβ¨
π¦ where this page comes from
- ubuntu stonking: apparmor-utils 6.0.0~alpha1-0ubuntu4 Β· GPL-2.0-or-later
- π girlified by deepseek-ai/DeepSeek-V4.1-Flash on : a language model's rewrite of the original, under its terms