added firejail --apparmor.print and firemon --apparmor

2 files changed, 18 insertions, 0 deletions

diff --git a/src/man/firejail.txt b/src/man/firejail.txt
index 1a769176c..8704e53b3 100644
--- a/src/man/firejail.txt
+++ b/src/man/firejail.txt
@@ -111,6 +111,21 @@ $ firejail --appimage krita-3.0-x86_64.appimage
 $ firejail --appimage --private krita-3.0-x86_64.appimage
 .br
 $ firejail --appimage --net=none --x11 krita-3.0-x86_64.appimage
+
+.TP
+\fB\-\-apparmor.print=name|pid
+Print the AppArmor confinement status for the sandbox identified by name or by PID.
+.br
+
+.br
+Example:
+.br
+$ firejail \-\-apparmor.print=browser
+.br
+5074:netblue:/usr/bin/firejail /usr/bin/firefox-esr
+.br
+  AppArmor: firejail-default enforce
+
 .TP
 \fB\-\-audit
 Audit the sandbox, see \fBAUDIT\fR section for more details.
diff --git a/src/man/firemon.txt b/src/man/firemon.txt
index 957a224c6..4827bbbeb 100644
--- a/src/man/firemon.txt
+++ b/src/man/firemon.txt
@@ -10,6 +10,9 @@ these processes are also being monitored. On Grsecurity systems only root user
 can run this program.
 .SH OPTIONS
 .TP
+\fB\-\-apparmor
+Print AppArmor confinement status for each sandbox.
+.TP
 \fB\-\-arp
 Print ARP table for each sandbox.
 .TP