Comment 1 for bug 1989827

ufw status will talk to the kernel as part of seeing if the firewall is up and this requires root permissions. The sudoers entry is your best bet right now.

A dbus service with policykit for ufw could be written which would address this. This may happen at some point, but is not planned.

If all you want is inactive vs active, you could check `systemctl status ufw` or read the value of ENABLED out of /etc/ufw/ufw.conf.