Overview of updates

Latest available version: 17.03.24

Overview of the most recent updates to AIX Health Check:

Version: 17.03.24
  • New check script checkniminfo.ksh to display the contents of /etc/niminfo.
  • New check script checknimservices.ksh to check if the correct entries are present in /etc/services for NIM.
Version: 17.02.27
  • New check script checkmajor.ksh to list the major numbers of the volume groups.
Version: 17.02.21
  • Update to check script checkglvmlsrpvserver.ksh to add additional details of rpvserver devices.
  • Update to check script checkglvmlsrpvclient.ksh to add additional details of rpvclient devices.
Version: 17.02.18
  • Update to check script checkskulker to properly list the number of discovered files that can be removed by skulker.
  • Update to check script checkghostscript.ksh to check for a newer version of Ghostscripts, as well as to update the description of the check script, considering that the AIX Toolbox for Linux Applications no longer contains Ghostscript.
  • Update to the description of check script checkedition.ksh to add information on how to change the AIX edition to either standard or enterprise.
Version: 17.02.14
  • Update to check script checklqueryvg.ksh to improve the reporting of errors.
Version: 17.02.07
  • Update to check script checksystemfirmwarelevel.ksh for new available firmware levels for Power6 and Power7 hardware.
  • Update to check script checkoslevel.ksh to check for newly released fix packs for AIX 6.1, AIX 7.1 and AIX 7.2, as well as an update for technology level 1 for AIX 7.2.
  • New check script checkvgnonrelocatable.ksh to check if a volume group's bad block policy is set to non-relocatable.
  • Update to check script checklsfs.ksh to allow it to work properly with volume groups that use a disk block size of 4096 instead of the usual block size of 512 bytes.
  • Update to check script checketherchannellink.ksh to account for 10Gb ports that may show both a physical and a logical port state.
Version: 17.02.06
  • Update to check script checkcleanetc.ksh to also check for old copies of /etc/security/login.cfg and /etc/security/mkuser.sys.
Version: 17.01.31
  • Update to check script checkrsynclevel.ksh to avoid generating an error if rsync dependencies are missing on the system.
  • Update to check script checksysdumpupperbound.ksh to avoid any alerts on boot logical volume hd6.
Version: 17.01.18
  • Update to check script checktmpexecutables.ksh to correctly clean up its own temporary file.
  • Update to check script checksudoerrors.ksh to correctly clean up its own temporary file.
Version: 17.01.17
  • Update to check script checksnarunning.ksh to avoid reporting an error regarding SNA Communications Server not being active, if SNA Communications Server is installed within a PowerHA/HACMP cluster, and the current node is a standby node where no resource group is active.
  • New check script checksnastatus.ksh to check the SNA Communications Server status using snaadmin status_all.
  • Update to check script checkcronlogfailed.ksh to improve the output of any failed cron jobs.
  • Update to check script checketherchannelnetaddr.ksh to remove the recommnendation of not setting a netaddr address to ping for EtherChannel configurations using only physical network adapters.
Version: 17.01.15
  • Update to check script checkdisksdefined.ksh to exclude Remote Physical Volume Client disks, which are part of GLVM, and which will be in a defined state on a standby node.
  • Update to check script checketchostsvsdns.ksh to exclude checking any persistent IP labels configured within a PowerHA/HACMP cluster.
  • New check script checkpowerhaclstato.ksh to display the PowerHA/HACMP cluster status using clstat -o.
  • New check script checkpowerhaclrginfo.ksh to display the output of the PowerHA/HACMP command clRGinfo, to show the resource group status within the cluster.
  • New check script checkpowerhacllsif.ksh to display the output of the PowerHA/HACMP command cllsif, to show the network interfaces in use within the cluster.
  • New check script checkpowerhacllscf.ksh to display the output of the PowerHA/HACMP command cllscf, to show the cluster configuration information.
Version: 17.01.12
  • Update to the descriptions of several check scripts to correct some spelling errors.
Version: 17.01.11
  • Update to the description of check script checkpowerhalevel.ksh to include the latest PowerHA level information.
Version: 17.01.10
  • New check script checkodmdir.ksh to check if variable ODMDIR is correctly set to /etc/objrepos.
Version: 17.01.08
  • Update to check script checknfssoft.ksh to exclude any home directories mounted automatically through LDAP or automountd.
  • Update to check script checknfsnosuid.ksh to exclude any home directories mounted automatically through LDAP or automountd.
  • Update to check script checkbootlist.ksh to only alert about a cd entry in the bootlist, if it comes before any disk entries.
  • Update to check script checkall.ksh to add the -G option to display check scripts in the output that end with ERROR (returncode 1) only.
Version: 17.01.07
  • Update to check script checketchostsnonnumeric.ksh to avoid checking empty lines in /etc/hosts.
  • Update to check script checkdisktypesinvg.ksh to exclude checking disks in use as remote physical volume client within GLVM.
  • Update to check script checkauthorizedkeys.ksh to also exclude checking hostnames configured as an interface within a PowerHA cluster.
  • New check script checknonstandardssh.ksh to check if a non-standard version of ssh is being used.
  • New check script checkglvmgmvgstat.ksh to run gmvgstat to check geographically mirrored volume group status for GLVM.
  • New check script checkglvmrpvstat.ksh to run rpvstat to display Remote Physical Volume statistics for GLVM.
  • New check script checkglvmlsrpvserver.ksh to run lsrpvlserver to display all remote physical volume servers configured for GLVM.
  • New check script checkglvmlsrpvclient.ksh to run lsrpvlcient to display all remote physical volume clients configured for GLVM.
  • New check script checkglvmlsglvm.ksh to run lsglvm to display physical disks configured for GLVM.
  • Update to check script checkpowerhasharedvgs.ksh to exclude checking GLVM disk, because GLVM can have a different number of disks on each cluster node.
  • New check script checkglvmlsglvmc.ksh to run lsglvm -c to identify any missing Geographic Logical Volume Manager (GLVM) requisites.
Version: 17.01.06
  • Update to check script checkuserkshrc.ksh to avoid checking home directories of users that happen to have the same home directory as user root.
  • Update to check script checkpowerhaemgr.ksh to check for a specific Could not load ssh error, before continuing, to avoid wrong output. This may happen if a freeware SSH version is installed on a cluster node.
  • Update to check script checketcpasswdperms.ksh to also output the incorrect settings, if any are found.
  • Upddate to check script checkpowerhargfallbackpolicy.ksh to include the full path to clshowres, incase the PATH statement is missing the cluster folders.
Version: 17.01.04
  • Update to check script checketchosts.ksh to update the output provided by the script.
Version: 17.01.02
  • Copyright update of the AIX Health Check package from 2016 to 2017.
Version: 16.12.28
  • New check script checkhostnamevsdns.ksh to check if the hostname and the name known in DNS match.
Version: 16.12.23
  • Update to check script checkipaddress.ksh to also look at prtconf for determining the IP address if the IP address can't be found in /etc/hosts.
  • Update to check script checktsmnodenameindsmsys.ksh to check only for the short hostname.
  • Update to check script checkbootlist.ksh to allow it to run better even if one of the disks in the bootlist is marked as missing.
  • Update to check script checkbash.ksh to allow it to work with older levels of bash.
Version: 16.12.22
  • Update to check script checkvarpreserve.ksh to check if the du ocmmand is successful before proceeding with the script execution.
  • Update to check script checkvaradmsa.ksh to check if the du ocmmand is successful before proceeding with the script execution.
  • Update to check script checkusrsysinstimages.ksh to check if the du ocmmand is successful before proceeding with the script execution.
  • Update to check script checkuseraccounts.ksh to check if the lastupdate attribute exists.
  • Update to check script checktmpusage.ksh to check if the df command is successful before proceeding with the script execution.
  • Update to check script checksudoersgroups.ksh to exclude checking user root.
  • Update to check script checksnmpvacmview.ksh to check if /etc/snmpdv3.conf exists before proceeding with the script execution.
  • Update to check script checksmtsupport.ksh to redirect the errors of the smtctl command to /dev/null.
  • Update to check script checksbmax.ksh to check if the bootmode can be determined using no -r before proceeding with the script execution.
  • Update to check script checkrootvgdisksonfcs.ksh to redirect the errors of the lsdev command to /dev/null.
  • Update to check script checkrfc1122addrchk.ksh to redirect the errors of the no command to /dev/null.
  • Update to check script checkpre520tune.ksh to check if the pre520tune attribute exists before prcoeeding with the exeuction of the script.
  • Update to chesk script checkpowermgt.ksh to redirect the errors of the pmctrl command to /dev/null.
  • Update to check script checkoslevel.ksh to check if the oslevel command works properly before proceeding with the execution of the script.
  • Update to check script checknumcmdelems.ksh to redirect errors of the lspath command to /dev/null.
  • Update to check script checkmpiopathsvsadapters.ksh to redirect errors of the lspath command to /dev/null.
  • Update to check script checkmemvscpu.ksh to check if the lparstat command exists before proceeding with the script execution.
  • Update to check script checkmailq.ksh to redirect the errors of the cat command to /dev/null.
  • Update to check script checklparmemorysettings.ksh to check properly if the lparstat command exists before proceeding with the script execution.
  • Update to check script checklostfoundsize.ksh to check if the du -m command works properly before proceeding withe the script execution.
  • Update to check script checkj2nbuffer.ksh to redirect the errors of the vmstat -v command to /dev/null.
  • Update to check script checkipqmaxlen.ksh to redirect the errors of the no -L command to /dev/null.
  • Update to check script checkipnfrag.ksh to redirect the errors of the no -r command to /dev/null.
  • Update to check script checkipforwarding.ksh to redirect the errors of the no -r command to /dev/null.
  • Update to check script checkhiperapars.ksh to check if the oslevel command works properly before proceeding with the execution of the script.
  • Update to check script checkfscsidyntrk.ksh to check if the dyntrk attribute exists before proceeding with the execution of the script.
  • Update to check script checklgtermdma.ksh to redirect the errors of the lpsath command to /dev/null.
  • Update to check script checklspath.ksh to redirect the errors of the lpsath command to /dev/null.
  • Update to check script checkfcmaxxfersize.ksh to redirect the errors of the lpsath command to /dev/null.
  • Update to check script checkfailedloginsize.ksh to use du -ks instead of du -ms.
  • Update to check script checkextendednetstats.ksh to check if the bootmode can be determined using no -r before proceeding with the script execution.
  • Update to check script checkexcluderootvg.ksh to redirect the errors of the lscore command to /dev/null.
  • Update to check script checketcperfdaily.ksh to check if the du -ms command was successful before proceeding with the script execution.
  • Update to check script checkearlierfilesets.ksh to check if the oslevel command was successful before proceeding with the script execution.
  • Update to check script checkdirectedbroadcast.ksh to check if the bootmode can be determined using no -r before proceeding with the script execution.
  • Update to check script checkdevrandom.ksh to check if /dev/random or /dev/urandom are links instead of files before proceeding with the script execution.
  • Update to check script checkcronlogconf.ksh to check if /etc/cronlog.conf exists before proceeding with the script execution.
  • Update to check script checkcoredir.ksh to check if the core_path attribute exists before proceeding with the script execution.
  • Update to check script checkcorecompress.ksh to check if the core_compress attribute exists before proceeding with the script execution.
  • Update to check script checkcleansshdir.ksh to also allow file prng_seed to exist in the ~root/.ssh directory.
  • Update to check script checkbcastping.ksh to redirect the errors of the no -r command to /dev/null.
  • Update to check script checkarptkillc.ksh to check if the bootmode can be determined using no -r before proceeding with the script execution.
  • Update to check script checkaiostatus.ksh to check if the number of logical CPUs can be determined before making calculations.
  • Update to check script checkvmo.ksh to check if the vmo or ioo command exists before executing the script.
  • Update to check script checkrunningkernel.ksh to check if the vmo or ioo command exists before executing the script.
  • Update to check script checkpgahdscalethresh.ksh to check if the vmo or ioo command exists before executing the script.
  • Update to check script checknumfsbufs.ksh to check if the vmo or ioo command exists before executing the script.
  • Update to check script checklvmbufcnt.ksh to check if the vmo or ioo command exists before executing the script.
  • Update to check script checkj2dynamicbufferpreallocation.ksh to check if the vmo or ioo command exists before executing the script.
  • Update to check script checkiooa.ksh to check if the vmo or ioo command exists before executing the script.
  • Update to check script checkaiomaxreqs.ksh to check if the vmo or ioo command exists before executing the script.
  • Update to check script checkvmmmpsizesupport.ksh to check if the vmo or ioo command exists before executing the script.
  • Update to check script checkvmmklockmode.ksh to check if the vmo or ioo command exists before executing the script.
  • Update to check script checkvmoa.ksh to check if the vmo or ioo command exists before executing the script.
  • Update to check script checkpowerhavmo.ksh to check if the vmo or ioo command exists before executing the script.
  • Update to check script checkpagestealmethod.ksh to check if the vmo or ioo command exists before executing the script.
  • Update to check script checknumlockspersemid.ksh to check if the vmo or ioo command exists before executing the script.
  • Update to check script checkmaxpgahead.ksh to check if the vmo or ioo command exists before executing the script.
  • Update to check script checklrufilerepage.ksh to check if the vmo or ioo command exists before executing the script.
  • Update to check script checkfreeframewaits.ksh to check if the vmo or ioo command exists before executing the script.
  • Update to check script checkenhancedaffinity.ksh to check if the vmo or ioo command exists before executing the script.
  • Update to check script checkall.ksh to allow it to run properly on AIX 5.1 as well, where the df command does not allow the -m option, and Korn Shell does not recognize the == test command parameter.
  • Update to the description of check script checkcleanetc.ksh to provide additional information of why files can be cleaned up from folder /etc.
  • Update to the description of check script checkcleanroot.ksh to provide additional information of why files can be cleaned up from the root home directory.
  • Update to the description of check script checkcleansshdir.ksh to provide additional information of why files can be cleaned up from folder ~root/.ssh.
  • Update to the description of check script checkcleansshdiroracle.ksh to provide additional information of why files can be cleaned up from folder ~oracle/.ssh.
  • New check script checksendmailopenrelay.ksh to check if sendmail is configured for open relay.
Version: 16.12.20
  • Update to check script checknetsvcorder.ksh to add some more information to the output generated by the script.
  • Update to the description of check script checkdefaultgateway to add an extra command to see the defined default gateway(s) on a system.
  • Update to check script checknsorder.ksh to provide a warning instead of an error when either $NSORDER or /etc/irs.conf is used.
  • New check script checketcirsconf.ksh to display the contents of /etc/irs.conf.
  • New check script checkcleanetmail.ksh to check for any files in /etc/mail that can be cleaned up.
Version: 16.12.16
  • Update to check script checknfsnosuid.ksh to exclude checking for any NFS mounted file systems in use for generating a mksysb image from the NIM server.
  • Update to check script checknfssoft.ksh to exclude checking for any NFS mounted file systems in use for generating a mksysb image from the NIM server.
  • Update to check script checkfsmountoptions.ksh to exclude checking for any NFS mounted file systems in use for generating a mksysb image from the NIM server.
  • Update to check script checkfsvsetcfilesystems.ksh to exclude checking for any NFS mounted file systems in use for generating a mksysb image from the NIM server.
  • Update to check script checknfsaccess.ksh to exclude checking for any NFS mounted file systems in use for generating a mksysb image from the NIM server.
  • Update to check script checknfsconfig.ksh to exclude checking for any NFS mounted file systems in use for generating a mksysb image from the NIM server.
  • Update to check script checknfsmountfolder.ksh to exclude checking for any NFS mounted file systems in use for generating a mksysb image from the NIM server.
Version: 16.12.15
  • Update to check script checkinstalldate.ksh to also display the first install date of the system.
Version: 16.12.14
  • New check script checklspvlocked.ksh to check for any locked devices.
  • Update to check script checklistvgbackup.ksh to check for both mksysb and savevg backups.
  • New check script checkmultipleipinetchosts.ksh to check for multiple different IP addresses for the hostname in /etc/hosts.
  • Update to check script checkusrbin.ksh to also display the incorrect permissions of /usr/bin, if not correctly set.
  • Update to check script checkuserprofile.ksh to avoid reporting a user twice if a user is both known locally and through LDAP.
  • New check script checkdnslookupmultipleip.ksh to check if a host is registered in DNS with multiple IP addresses.
  • Update to check script checkhostvsnslookup.ksh to avoid reporting an error if a host is registered in DNS with 2 or more different IP addresses.
  • Update to check script checketchostsvsdns.ksh to avoid reporting an error if a host is registered in DNS with 2 or more different IP addresses.
  • Update to check script checkdnslookup.ksh to avoid reporting an error if a host is registered in DNS with 2 or more different IP addresses.
  • Update to check script checkauthorizedkeysentries.ksh to check for a minimum of 3 entries on each line in ~root/.authorized_keys files, instead of exactly 3, in case an entry with a space in the key name has been used.
Version: 16.12.13
  • Update to check script checkdnslookup.ksh to report a proper output even if the AIX server is a DNS server.
  • Update to check script checkrootshell.ksh to also display the current shell for user root, if not set to the Korn shell.
  • New check script checkresolvconfparse.ksh to check if parsing of /etc/resolv.conf is successful.
  • New check script checksupportpassword.ksh to check if we can guess the password of user support, if that user exists.
  • New check script checkadminpassword.ksh to check if we can guess the password of user admin, if that user exists.
  • New check script checkmanagerpassword.ksh to check if we can guess the password of user manager, if that user exists.
  • Update to check script checkoraclepassword.ksh to check for additional possible passwords.
  • Update to check script checkrootpassword.ksh to check for additional possible passwords.
  • Update to check script checksecuritypassword.ksh to check for additional possible passwords.
  • Update to check script checkshutdownpassword.ksh to check for additional possible passwords.
  • Update to check script checksudoerspassword.ksh to check for additional possible passwords.
  • Update to check script checksystempassword.ksh to check for additional possible passwords.
  • Update to check script checkuidzeropassword.ksh to check for additional possible passwords.
  • Update to check script checkviospadminpassword.ksh to check for additional possible passwords.
Version: 16.12.08
  • Update to check script checksudoersgroups.ksh to avoid reporting the same error twice if multiple entries in /etc/sudoers exist.
  • Update to check script checkhomedirssize.ksh to allow it to work properly on AIX 5.3 TL7.
Version: 16.12.06
  • Update to check script checksudolog.ksh to display the incorrect permissions, if the permissions are not set correctly.
  • Update to check script checksnalevel.ksh to provide a more descriptive output.
  • Update to check script checkopensshlevel.ksh to provide a more descriptive output.
  • Update to check script checkhomedirs.ksh to check for the existance of users using the id command instead of looking at /etc/passwd, in case user accounts are defined elsewhere, like through LDAP.
  • Update to check script checklspvl.ksh to also display if a volume group is not varied on.
  • New check script checkhphsvpathsstate.ksh to run HP StorageWorks hsvpaths command to check the state of the HSV IO paths.
  • Update to check script checkcaalscluster.ksh to indicate if command lscluster is not present on the system.
  • Update to check script checkbootptab.ksh to indicate if no entries in /etc/bootptab are present.
  • Update to check script checkaiooa.ksh to indicate if the aioo command is not present on the system.
  • Update to the description of check script checkvmmklockmode.ksh to remove a typo.
  • Update to check script checkvarspoolmqueue.ksh to change the find command from ctime to mtime, to allow to find more old files in /var/spool/mqueue.
  • Update to check script checkcrontabs.ksh to check for the existance of users using the id command instead of looking at /etc/passwd, in case user accounts are defined elsewhere, like through LDAP.
  • Update to check script checkmailboxowners.ksh to check for the existance of users using the id command instead of looking at /etc/passwd, in case user accounts are defined elsewhere, like through LDAP.
  • Update to check script checkgnutar.ksh to use the rpm command to determine the version of GNU tar, instead of tar itself, which aids to avoid reporting errors, if required libraries for the tar command are missing.
  • Update to check script checkfreespaceinfs.ksh to avoid reporting the root file system multiple times if a file system is not mounted.
  • Update to check script checktotalsan.ksh to include HP 3PAR storage.
  • New check script checkldapcfg.ksh to display the contents of /etc/security/ldap/ldap.cfg, if present.
Version: 16.12.05
  • New check script checklibpng.ksh to check if the libpng RPM is installed, and if so, if the latest version, version 1.6.21, is installed.
  • New check script checklibtiff.ksh to check if the libtiff RPM is installed, and if so, if the latest version, version 3.8.2, is installed.
  • New check script checklibpaper.ksh to check if the libpaper RPM is installed, and if so, if the latest version, version 1.1.24, is installed.
  • New check script checklibjpeg.ksh to check if the libjpeg RPM is installed, and if so, if the latest version, version 6b, is installed.
  • Update to check script checkcups.ksh to check if the latest version of cups, version 2.0.2, is installed.
  • Update to check script checkless.ksh to check if the latest version of less, version 482, is installed.
  • Update to check script checkhttpd.ksh to check if httpd is installed, and if so, if the RPM or fileset version is used, and if not both are installed at the same time.
Version: 16.12.04
  • Update to check script checkgzip.ksh to check if the latest version of gzip is installed, version 1.6.
  • Update to check script checkenscript.ksh to check if the latest version of enscript is installed, version 1.6.1.
  • Update to check script checkbash.ksh to check for the latest version of bash to be installed, version 4.3.30.
  • Update to check script checkzip.ksh to check if the latest version of unzip is installed, version 3.0.
  • Update to check script checkunzip.ksh to check if the latest version of unzip is installed, version 6.0.
  • Update to the description of check script checkinetdcommands.ksh to add that the check script also checks for commands in /etc/inetd.conf owned by others than user root.
  • Update to check script checkcurl.ksh to check for the latest version of curl, version 7.44.
  • Update to check script checkbootlist.ksh to check for entries in the bootlist that consist of a single dash.
  • Update to check script checkuserpassword.ksh to not report for user root, as check script checkrootpassword.ksh does the same.
  • Update to check script checknpivdiskattr.ksh to no longer report on incorrect queue depth setting, because check script checkqueuedepth.ksh does the same.
  • Update to check script checkpgsp.ksh to avoid reporting on a un-mirrored paging space, if NPIV is used.
  • Update to check script checkwget.ksh to improve the reporting of the wget version installed.
  • Update to check script checkuserlength.ksh to avoid reporting on entries in /etc/passwd that start with a plus sign.
  • Update to check script checkuserchars.ksh to avoid reporting on entries in /etc/passwd that start with a plus sign.
  • Update to check script checkuidunique.ksh to avoid reporting on entries in /etc/passwd that start with a plus sign.
  • Update to check script checksuid.ksh to avoid reporting on coreutils commands /usr/opt/freeware/bin/sudo and /usr/opt/freeware/bin/su.
  • New check script checklibstdc.ksh to check if the correct level of libstdc++ RPM is installed.
  • New check script checklibgcc.ksh to check if the correct level of libgcc RPM is installed.
  • New check script checkgmp.ksh to check if the correct level of gmp RPM is installed.
  • New check script checkcoreutils.ksh to check if the correct level of coreutils RPM is installed.
  • Update to check script checkrootvgevendisks.ksh to avoid reporting on a single disk in rootvg, if NPIV is used.
  • Update to check script checkrootvgdisks.ksh to avoid reporting on a single disk in rootvg, if NPIV is used.
  • Update to check script checknfssoft.ksh to avoid reporting on a lost+found folder.
  • Update to check script checknfsnosuid.ksh to avoid reporting on a lost+found folder.
  • Update to check script checkmkuserdefault.ksh to also display current entries in /etc/security/mkuser.default, if they aren't set as default.
  • Update to check script checklsoflevel.ksh to check for the latest lsof version available.
  • Update to check script checkhomedirs.ksh to avoid reporting on entries in /etc/passwd that start with a plus sign.
  • Update to check script checkgroupconsistency.ksh to avoid reporting entries that aren't being checked by the grpck command.
  • Update to check script checkgnutar.ksh to check for the latest GNU tar version to be installed, version 1.22, which can be found in the IBM AIX Toolbox for Linux applications.
  • Update to check script checkgidbelow100.ksh to avoid checking entries that start with a plus sign.
Version: 16.12.03
  • Update to check script checkgecos.ksh to avoid reporting on entries in /etc/passwd that start with a plus sign.
  • Update to check script checkfsvsetcfilesystems.ksh to avoid reporting on NFS file systems if automountd is active.
  • Update to check script checkcleanetc.ksh to also check for old copies of the rc.nfs file.
  • Update to check script checkblankpassword.ksh to avoid entries in /etc/passwd that start with a plus sign.
  • Update to check script checkauthconsistency.ksh to avoid reporting entries that are ignored by pwdck.
Version: 16.12.02
  • Update to the description of check script checkxivhakvsnoxivdevices.ksh to add additional information on how to uninstall the XIV host attachment kit, if necessary.
  • Update to check script checkvarspoollpdperms.ksh to correctly recommend the permissions for /var/spool/lpd.
  • Update to check script checkusrsbinumountperms.ksh to correctly recommend the permissions for /usr/sbin/umount.
  • Update to check script checkusrsbinpingperms.ksh to correctly recommend the permissions for /usr/sbin/ping.
  • Update to check script checkusrsbinmountperms.ksh to correctly recommend the permissions for /usr/sbin/mount.
  • Update to check script checkusrbinpsperms.ksh to correctly recommend the permissions for /usr/bin/ps.
  • Update to check script checkusrbinchownperms.ksh to correctly recommend the owner for /usr/bin/chown.
  • Update to check script checksystemfirmwarelevel.ksh to allow the script to work correctly on Power7 blades.
  • Update to check script checkoslevel.ksh to recommend updating to technology level 4, if on AIX version 7.1.
  • Update to check script checkdevscan.ksh to check for the latest version of the devscan tool to be installed (version 1.22).
  • Update to check script checksudoversion.ksh to check for a newly released version of sudo, version 1.8.15.
  • New check script checkzlib.ksh to check if the correct level of zlib RPM is installed.
  • New check script checkbzip2.ksh to check if the correct level of bzip2 RPM is installed.
  • Update to check script checkgettext.ksh to check for a newly released version of gettext, version 0.19.7.
  • Update to check script checkopenssllevel.ksh to check for a newly released version of OpenSSL, version 1.0.2.1000. Please note that version 1.0.1 of OpenSSL is moving out of support in January 2017.
  • Update to check script checkopensshlevel.ksh to check for a newly released version of OpenSSH, version 6.0.0.6202.
  • Update to check script checkwget.ksh to check for a newly released version of wget, available in the AIX Toolbox for Linux applications (version 1.17.1).
  • Update to check script checksudoersusers.ksh to avoid reporting an error on non-existing groups if groups are defined through LDAP.
  • Update to check script checksrcmstractive.ksh to avoid reporting multiple srcmstr processes, if that's not true.
  • Update to check script checknpivdiskattr.ksh to display any incorrect disk queue depth settings.
  • Update to check script checkhomesize.ksh to avoid reporting an error if file system /home does not exist.
  • Update to check script checkhomefilesystem.ksh to better test for the existance of the /home file system.
  • Update to check script checkhomefs.ksh to also display the current permissions of /home if those need to be updated.
  • Update to check script checkdevsrcunixperms.ksh to correct a command to determine the correct permissions of the /dev/.SRC-unix folder.
  • Update to check script checkrperf.ksh to account for newly updated rperf script (version 33) as released by IBM.
  • Update to several check scripts that guess passwords of users to add possible passwords to search for.
Version: 16.12.01
  • Update to the description of check script checkenv.ksh to correct a typo and add additional information.
  • Update to check script checkcpuspeed.ksh to allow for more different commands to determine the correct CPU speed.
Version: 16.11.30
  • Update to check script checkpowerhalevel.ksh to account for newly release PowerHA service packs.
Version: 16.11.29
  • Update to check script checkall.ksh to remove a typo.
Version: 16.11.01
  • Update to check script checksystemfirmwarelevel.ksh for updated Power7+ and Power8 firmware levels.
Version: 16.10.24
  • New check script checklvlabel.ksh to check if there is a label configured for all logical volumes defined for file system usage.
Version: 16.10.17
  • Update to check script checksystemgroup.ksh to check if the group exists without any users, before checking further, to avoid unneccessary errors.
Version: 16.10.14
  • Update to checktmpexecutables.ksh to report a warning if any executables are found in /tmp or /var/tmp.
  • Update to check script checktmout.ksh to avoid generating an error when TMOUT is not set at all.
  • New check script checkgidunique.ksh to check if all GIDs are unique.
  • Update to check script checketcpasswdpasswords.ksh to remove a typo in the awk command.
  • New check script checkuidzeropassword.ksh to check if we can guess any passowrds of users with uid zero, excluding root.
  • Update to the description of check script checkuserpassword.ksh to remove a typo.
Version: 16.10.13
  • Update to check script checkall.ksh to allow for nicer txt output.
Version: 16.10.12
  • Update to check script checkusershell.ksh to allow it to generate an error if an invalid shell is found.
  • Update to the category of check script checkusrbincron.ksh to also add it to the scheduling category.
  • Update to the description of check script checkusersloggedonlongtime.ksh to correct some typos.
Version: 16.10.11
  • Update to the category of check script checknoatime.ksh to also add it to the performance category.
  • Update to check script checksudoersgroups.ksh to match exact group IDs and to improve the output.
  • Update to check script checkall.ksh to ensure errors are printed even though a check script that is being run does not generate any standard output itself.
Version: 16.10.07
  • New check script checkusrbincpioperms.ksh to check the permissions of /usr/bin/cpio.
  • New check script checkusrbinenvperms.ksh to check the permissions of /usr/bin/env.
  • New check script checkusrbindfperms.ksh to check the permissions of /usr/bin/df.
  • New check script checkusrbindateperms.ksh to check the permissions of /usr/bin/date.
  • New check script checkusrbincutperms.ksh to check the permissions of /usr/bin/cut.
  • New check script checkusrbinchgrpperms.ksh to check the permissions of /usr/bin/chgrp.
  • New check script checkusrbinbasenameperms.ksh to check the permissions of /usr/bin/basename.
  • New check script checkusrbinddperms.ksh to check the permissions of /usr/bin/dd.
  • New check script checkusrbinechoperms.ksh to check the permissions of /usr/bin/echo.
  • New check script checkusrbinfindperms.ksh to check the permissions of /usr/bin/find.
  • New check script checkusrbinhostnameperms.ksh to check the permissions of /usr/bin/hostname.
  • New check script checkusrbinkillperms.ksh to check the permissions of /usr/bin/kill.
  • New check script checkusrbinlnperms.ksh to check the permissions of /usr/bin/ln.
  • New check script checkusrbinlsperms.ksh to check the permissions of /usr/bin/ls.
  • New check script checkusrbinpsperms.ksh to check the permissions of /usr/bin/ps.
  • New check script checkusrbinpwdperms.ksh to check the permissions of /usr/bin/pwd.
  • New check script checkusrbintarperms.ksh to check the permissions of /usr/bin/tar.
  • New check script checkusrbintouchperms.ksh to check the permissions of /usr/bin/touch.
  • New check script checkusrsbinmountperms.ksh to check the permissions of /usr/sbin/mount.
  • New check script checkusrsbinumountperms.ksh to check the permissions of /usr/sbin/umount.
  • New check script checkusrsbinpingperms.ksh to check the permissions of /usr/sbin/ping.
  • Update to check script checketcrcdperms.ksh to avoid an error if folder /etc/rc.d does not exist.
  • Update to check script checketcrcdrcperms.ksh to also check if file /etc/rc.d/rc exists.
  • Update to check script checketcshellsperms.ksh to also check if file /etc/shells exists.
  • Update to check script checkprotocolsperms.ksh to also check if file /etc/protocols exists.
  • Update to check script checkscpperms.ksh to recommend a stricter setting for permissions to /usr/bin/scp.
  • Update to check script checksecurityperms.ksh to also recommend running commands if permissions are incorrectly set.
  • Update to check script checkservicesperms.ksh to also check if file /etc/services exists.
  • Update to check script checksrcmstractive.ksh to check for multiple instances of srcmstr running.
  • Update to check script checkmaxuproc.ksh to avoid recommending a change to maxuproc when it is set appropriately.
  • Update to check script checkpgspsize.ksh to remove a redundant character in the output.
Version: 16.10.06
  • New check script checkusrbinegrepperms.ksh to check the permissions of /usr/bin/egrep.
  • New check script checkvarspoollpdperms.ksh to check the permissions of /var/spool/lpd.
  • New check script checkusrbintailperms.ksh to check the permissions of /usr/bin/tail.
  • New check script checkusrbinrmdirperms.ksh to check the permissions of /usr/bin/rmdir.
  • New check script checkusrbinchownperms.ksh to check the permissions of /usr/bin/chown.
Version: 16.10.04
  • Update to check script checksudoversion.sh to check for the correct latest version of sudo 1.6.9p23 to be installed on the system.
  • Update to check script checkdevsrcperms.ksh to recommend rebooting the server if /dev/SRC is missing.
  • New check script checkinodeusage.ksh to check the inode usage of all file systems.
  • New check script checkdevsrcunixperms.ksh to check the permissions of /dev/.SRC-unix.
  • Update to check script checkinittaberrs.ksh to improve reporting of potential errors discovered.
Version: 16.10.03
  • Update to check script checkinittabperms.ksh to also check if file /etc/inittab exists.
Version: 16.09.27
  • Update to the description of check script checkopennfsexports.ksh to provide more information.
Version: 16.09.26
  • Update to check script checketcntpconfperms.ksh to correct a typo in the output.
Version: 16.09.12
  • Update to check script checkoslevel.ksh for recomendations of service pack levels for AIX 7.1.
  • Update to check script checkskulker.ksh to prevent listing more than 100 entries of files to be removed.
  • Update to check script checkvarspoolfiles.ksh to prevent listing correct files as unusual.
Version: 16.09.09
  • Update to check script checkall.ksh to ensure the installation folder of checkall.ksh can be written to, as well as ensuring that temporary files being generated are host specific, so the script can be run from multiple servers using a NFS share.
  • Update to check script checkftpanonymous.ksh to change localhost to 127.0.0.1, to prevent issues if localhost does not resolve to 127.0.0.1.
  • Update to check script checkopennfsexports.ksh to change localhost to 127.0.0.1, to prevent issues if localhost does not resolve to 127.0.0.1.
Version: 16.09.07
  • Update to check script checkall.ksh to correct an issue with HTML output in Microsoft Outlook.
  • New check script checkusrsbinfbcheckperms.ksh to check the permissions of /usr/sbin/fbcheck.
  • New check script checklocalhost.ksh to check if localhost resolves to 127.0.0.1.
  • Update to check script checkresolvconf.ksh to allow options that are available in /etc/resolv.conf since AIX 6.1.
  • Update to check script checksambaactive.ksh to improve the output of the script.
  • Update to check script checksambalevel.ksh to check for the latest version of Samba (4.3.8).
  • Update to check script checksendmailsmtpconnection.ksh to allow for a different response from the SMTP server.
  • Update to check script checksystemfirmwarelevel.ksh to allow it to work properly on Power7 systems.
  • Update to check script checktuncheck.ksh to check if /usr/sbin/tuncheck is executable before running it.
  • New check script checkusrsbintuncheckperms.ksh to check the permissions of /usr/sbin/tuncheck.
  • Update to check script checkuserprofile.ksh to avoid reporting errors on .profile files when a system uses the same home directory for multiple users.
Version: 16.08.15
  • Update to check script checkipaddress.ksh to avoid checking for tsm in the hostname.
  • Update to check script checktsmfilesystems.ksh to avoid the script from hanging when TSM is not fully configured.
  • Update to check script checktsminclexcl.ksh to avoid the script from hanging when TSM is not fully configured.
Version: 16.08.08
  • Update to check script checksystemfirmwarelevel.ksh to account for newly release system firmware updates from IBM.
Version: 16.07.12
  • New check script checkvarspoolfiles.ksh to check for unusual files in /var/spool/lpd/pio/@local.
Version: 16.07.01
  • Update to check script checkcoredumps.ksh to find core dumps older than 7 days as well.
Version: 16.06.30
  • Update to check script checkhistfile.ksh to correct a typo in a comment.
Version: 16.05.18
  • Update to check script checkdirsworldwriteable.ksh to filter out duplicate entries.
  • Update to check script checksystemfirmwarelevel.ksh to account for newly released system firmware levels for Power6, Power7, Power7+ and Power8 systems.
  • Update to check script checkpowerhalevel.ksh due to a new service pack being released by IBM for PowerHA 7.2.
  • Update to check script checkoslevel.ksh due to new service packs having been released by IBM for AIX 6.1, AIX 7.1 and AIX 7.2.
  • Update to check script checkopenssllevel.ksh due to a new release of OpenSSL 1.0.2.500.
Version: 16.03.23
  • Update to check script checkpowerhalevel.ksh to reflect new available PowerHA fix pack levels and support life cycle dates for various PowerHA levels.
Version: 16.03.03
  • Update to check script checkopenssllevel.ksh to recommend the latest level of OpenSSL, version 1.0.1.515.
Version: 16.02.23
  • New check script checkhomefilesystem.ksh to check if /home is a separate file system.
Version: 16.02.19
  • Update to the description of check script checkhostnamelocalhost.ksh to remove an unnecessary word.
  • Update to check script checketcntpconfperms.ksh to allow for updated permission settings in AIX 7.1 for /etc/ntp.conf.
Version: 16.02.12
  • Update to the description of check script checkauthconsistency.ksh to display the commands used.
  • Update to check script checkoslevel.ksh to add comments when an upgrade to AIX 7 is required, along with updating the description of the check script.
  • Update to check script checkvgautosync.ksh to correct the command used to enable the autosync feature for a volume group.
Version: 16.02.08
  • Update to check script checkasosyslog.ksh to reduce the number of error messages presented when multiple syslog keywords are missing for ASO entries in /etc/syslog.conf.
  • Update to check script checksockthresh.ksh to add a missing quotation mark.
  • Update to check script checknumlockspersemid.ksh to change the recommendation for the vmo command to be run using the -r option, considering this is a restricted tunable.
  • Update to the description of check script checklspath.ksh to correct a typo.
Version: 16.01.25
  • Update to check script checkdefaultusersettings.ksh to bring the user default settings recommendations in line with the medium level of security recommende by AIXpert.
  • New check script checklogindelay.ksh to check if the logindelay feature has been enabled on the system, and is set to at least 5.
  • New check script checklogindisable.ksh to check if the logindisable feature has been enabled and set to 10 on the system.
  • New check script checklogininterval.ksh to check if the logininterval feature has been enabled on the system, and is set to 60 seconds.
  • New check script checkloginreenable.ksh to check if the loginreenable feature has been enabled on the system, and is set to 30 mintues.
  • New check script checksockthresh.ksh to check the current setting of the network option sockthresh.
Version: 16.01.21
  • Update to check script checkgecos.ksh to provide a better message when an issue with the GECOS field of a user is detected.
Version: 16.01.19
  • Update to check script checklsof.ksh to correctly handle a new way that the which command reports the existance of the lsof binary on AIX 7.2.
  • Update to check script checkmotdperms.ksh to allow alternative permissions of the /etc/motd file as well.
  • Update to check script checkoslevel.ksh to allow for checking the OS level on AIX 7.2.
  • Update to check script checkoslevel.ksh to check for the correct service pack of AIX 7.1 TL4.
  • Update to check script checkperlversion.ksh to allow for checking the version of Perl on AIX 7.2, which uses a new way to display the version level.
  • Update to check script checkpowervsaix.ksh to check the correct hardware in use for AIX 7.2.
Version: 16.01.15
  • Update to check script checkdictionlist.ksh to update the comment given in the script to display the correct dictionary file if not the default is used.
Version: 16.01.08
  • Update to check script checkall.ksh to discover the new IBM Power8 E850 system properly.
  • Update to all check scripts to update the copyright message for 2016.
  • Update to check script checkrperf.ksh to update the version to version 32 of the script.
  • Update to the description of check script checkbootlist.ksh to indicate how the normal boot list can be set correctly.
  • Update to check script checkall.ksh to handle single quotes in HTML output in Outlook 2013 correctly.
  • Update to the description of check script checkfirefoxlevel.ksh to include instructions on how to uninstall Firefox.
Version: 15.12.15
  • Update to check script checkall.ksh to properly handle angle brackes in the DESCRIPTIONS file.
Version: 15.11.12
  • Update to check script checkjavalevels.ksh to redirect errors of the lslpp command to /dev/null in case Java is not installed, to avoid generating an error message.
  • New check script checkvmmklockmode.ksh to check if vmo option vmm_klock_mode is set to 2, meaning if kernel data locking has been enabled.
Version: 15.11.11
  • Update to the description of check script checklspath.ksh to include information on how to remove any missing paths.
  • Update to the description of check script checkmissingowners.ksh to add a folder to the command to change ownership of certain files that do not have a correct owner and group set after a default AIX 7.1 TL3 SP4 installation.
  • Update to check scritp checkexcluderootvg.ksh to avoid generating errors if file /etc/exclude.rootvg does not exist.
Version: 15.11.10
  • New check script checkvgautosync.ksh to check if auto sync has been enabled for volume groups.
Version: 15.11.09
  • Update to check script checksystemfirmwarelevel.ksh to recommend newly released system firmware levels for Power6, Power7 and Power8 systems.
  • New check script checkpagestealmethod.ksh to check if vmo option page_steal_method is set to 1 (default).
  • New check script checknumlockspersemid.ksh to check if vmo option num_locks_per_semid is set to 1 (default).
  • Update to check script checklvmbufcnt.ksh to alert as well if lvm_bufcnt is set higher than the default.
Version: 15.11.05
  • New check script checktcpnewreno.ksh to check if network option tcp_newreno is enabled (set to 1).
  • Update to check script checkdirsworldwriteable.ksh to improve the damocles function.
  • Update to check script checkcoredumps.ksh to improve the damocles function.
  • Update to check script checkcrout.ksh to improve the damocles function.
  • Update to check script checkdevicefilesoutsidedev.ksh to improve the damocles function.
  • Update to check script checkdsmerrorlog.ksh to improve the damocles function.
  • Update to check script checkenq.ksh to improve the damocles function.
  • Update to check script checkmissingowners.ksh to improve the damocles function.
  • Update to check script checksuid.ksh to improve the damocles function.
Version: 15.11.02
  • Update to the description of check script checboscontentlist.ksh to better explain the reason for installing fileset bos.content_list on an AIX system.
  • Update to check script checkextendedhistory.ksh to add a check if EXTENDED_HISTORY has been defined in /etc/profile instead of /etc/environment.
  • Update to check script checkhistfile.ksh to add a check for both /etc/environment and /etc/profile for the HISTFILE variable.
Version: 15.10.27
  • Update to check script checkprocessnumber.ksh to correct an error in the comments of the script.
  • Update to check script checkprocesslist.ksh to correctly exclude the script itself from the process list.
Version: 15.10.26
  • Update to check script checkall.ksh to improve output if certain filesets are not installed required for running AIX Health Check.
Version: 15.10.15
  • Update to check script checkhiperapars.ksh to allow it to work on both AIX and VIOS systems.
  • Update to check script checklostfoundfolder.ksh to check if the mount point itself is available before reporting any missing lost+found folder.
  • Update to check script checkmailboxowners.ksh to avoid reporting duplicate mailbox issues.
  • Update to check script checkauthorizedkeysdups.ksh to improve the output reported.
  • Update to check script checksudoerssuplicates.ksh to correctly handle sed commands.
  • Update to check script checkauthorizedkeysdupsoracle.ksh to improve the output reported.
Version: 15.10.13
  • New check script checkpythonlevel.ksh to check if the correct level of Python RPM is installed.
Version: 15.10.12
  • Update to check script checksudoersduplicates.ksh to correct a minor issue that prevents reporting duplicate entries in the /etc/sudoers file.
Version: 15.10.06
  • Update to check script checksudoersdefaults.ksh to also check for the default logfile setting in /etc/sudoers.
Version: 15.10.02
  • New check script checksudoerrors.ksh to check for any errors reported by the sudo command.
Version: 15.09.24
  • Update to check script checksudoerspermissions.ksh to display the correct output if any wrong permissions are discovered.
Version: 15.09.10
  • New check script checkhiperapars.ksh to check if the system has the correct APARs installed.
  • New file APARS to include an overview of all APARs released by IBM. The source of this file is http://www-304.ibm.com/webapp/set2/flrt/doc?page=aparCSV.
  • New check script checkemgrreboot.ksh to check if any interim fixes have been installed that require a reboot, and the system has not been rebooted yet.
  • Update to check script checkopensshlevel.ksh to recommend to upgrade to level 6.0.0.6201, if not installed, per CVE-2015-5352.
Version: 15.08.25
  • New check script checkpowerhahosts.ksh to check if /etc/hosts on both nodes of a PowerHA cluster contain the same entries.
  • Update to check script checketcmailsendmailcfperms.ksh to allow stricter permissions for /etc/mial/sendmail.cf.
  • Update to check script checkcrontabcommands.ksh to ignore crontab commands that are in non-root crontab files, but are owned by user root.