Overview of updates - AIX version

Latest available version: 19.09.18

Overview of the most recent updates to UNIX Health Check for AIX:

Version: 19.09.18
  • Update to check script checksystemfirmwarelevel.ksh for new releases of Power8 and Power8 system firmware.
Version: 19.09.16
  • Update to check script checkpowerhalevel.ksh for newly release fix packs for PowerHA SystemMirror.
Version: 19.09.04
  • Update to the CHANGES file to correct a typo.
Version: 19.07.25
  • Update to check script checklostfoundsize.ksh to indicate a warning status when more than 10 MB of data is found in a lost+found folder.
Version: 19.07.23
  • Update to check script checkoslevel.ksh to recommend newly released service packs for AIX 7.1 and AIX 7.2.
  • Renamed check script checkauditfolder.ksh to checkauditperms.ksh.
Version: 19.07.18
  • New check script checkpermitemptypasswords.ksh to check if the PermitEmptyPasswords entry in /etc/ssh/sshd_config is either commented out or set to no.
  • New check script checksshpubkeyauthentication.ksh to check if the PubkeyAuthentication entry in /etc/ssh/sshd_config is either commented out or set to yes.
  • New check script checksshhostbasedauthentication.ksh to check if the HostBasedAuthentication entry in /etc/ssh/sshd_config is either commented out or set to no.
  • New check script checksshignorerhosts.ksh to check if the IgnoreRhosts entry in /etc/ssh/sshd_config is either commented out or set to yes.
  • New check script checksshmaxauthtries.ksh to check if the MaxAuthTries entry in /etc/ssh/sshd_config is either commented out or set within the range 3 to 6.
Version: 19.07.17
  • Update to check script checktopmemoryusers.ksh to allow it work correctly on AIX 5.3.
  • Update to check script checklspvu.ksh to allow it work correctly on AIX 5.3.
  • Update to check script checkxntpd.ksh to correct an issue with a defined variable.
  • Update to check script checksudoersusers.ksh to allow it work correctly when the system is LDAP enabled.
  • Update to check script checkmailboxowners.ksh to allow it to work correctly when the system is LDAP enabled.
  • Update to check script checklssrc.ksh to allow it to work in cases where individual resource controller items are started from /etc/inittab, but a space is missing after -s.
  • Update to check script checkgidbelow100.ksh to avoid displaying an alert when LDAP authentication is enabled on the system.
  • Update to check script checketcsecuritypasswdused.ksh to avoid displaying an alert when LDAP authentication is enabled on the system.
  • Update to check script checkcrout.ksh to display only the first 100 entries found to reduce the length of the output.
  • Fixed issues with the TOOLBOX file not listing the latest versions of the AIX Toolbox for Linux Applications.
  • New check script checkcleanetcssh.ksh to check for any files in /etc/ssh that can be cleaned up.
  • New check script checksshbanner.ksh to check the Banner entry in sshd_config.
Version: 19.07.16
  • New check script checksplunkinittab.ksh to check if the Splunk forwarder agent inittab entry is present in /etc/inittab, if installed.
  • New check script checksplunkactive.ksh to check if the Splunk Forwarder agent is active, if installed.
  • Update to check script checkopenssllevel.ksh to recommend version 1.0.2.1800 of OpenSSL.
  • Update to check script checkopensshlevel.ksh to recommend version 7.5.102.1800 of OpenSSH, to mitigate security vulnerabilities CVE-2019-6109, CVE-2019-6110, CVE-2019-6111 and CVE-2018-20685.
  • New check script checkrsyslogforwarding.ksh to check if the rsyslog messages are forwarded to a central logging server.
Version: 19.07.09
  • Update to check script checkall.ksh to update the message displayed when an individual check script takes too long to run.
Version: 19.06.05
  • Update to serveral check scripts to redirect the stderr of the lsattr command to /dev/null.
Version: 19.06.05
  • New check script checkdevurandom.ksh to check if the device /dev/urandom exists.
Version: 19.06.04
  • Update to check script checkpowerhalevel.ksh for new recommended service pack levels for PowerHA 7.2.2 and 7.2.3.
Version: 19.05.23
  • Update to check script checksystemfirmwarelevel.ksh to recommend newly release Power9 system firmware VL930.
Version: 19.05.22
  • Update to check script checkpatrollevel.ksh to recommend a new level of the BMC Patrol Agent software.
  • Update to the description of check script checkpatrolagent.ksh.
Version: 19.05.16
  • Renamed check script checkemcpowerunlic.ksh to checkemcpowerpathunlicensed.ksh.
  • Update to check script checkemcpowerpathlevel.ksh to recommend new available PowerPath levels.
  • Update to check script checkemcinq.ksh to remove a typo in a comment.
Version: 19.05.13
  • Update to check script checkoslevel.ksh to recommend new service packs available for AIX 7.1 TL5 and AIX 7.2 TL3.
Version: 19.04.03
  • New check script checkvarfilesystem.ksh to check if /var is a separate file system.
Version: 19.04.02
  • Update of the description of check script checketchostsnonnumeric.ksh to further explain what the non-numeric entries are.
Version: 19.03.26
  • Update of the package to allow for an RPM build of UNIX Health Check for AIX.
Version: 19.03.25
  • Update to check script checkjavalevels.ksh to recommend new minimum levels for Java 7, 7.1 and 8, per the latest IBM security advisory.
  • Update to check script checkoslevel.ksh to recommend newly available service packs for AIX 7.2 technology levels.
  • Update to check script checklosflevel.ksh to recommend version 4.89 of LSOF.
  • Update to check script checkopenssllevel.ksh to recommend version 1.0.2.1601 of OpenSSL.
  • Update to check script checkopensshlevel.ksh to recommend version 7.5.102.1600 of OpenSSH.
  • Update to check script checketcsecuritypasswdused.ksh to avoid reporting an issue on user accounts with no password set (already alerted through another check script).
  • Update to check script checkpython.ksh to use the TOOLBOX file to determine the latest version.
  • Update to check script checkcupsactive.ksh to remove a comment.
  • Update to check script checkcups.ksh to use the TOOLBOX file to determine the latest version.
  • Update to check script checkgangliagmondlevel.ksh to use the TOOLBOX file to determine the latest version.
  • Update to check script checkgangliagmetadlevel.ksh to use the TOOLBOX file to determine the latest version.
  • Update to check script checknmaplevel.ksh to use the TOOLBOX file to determine the latest version.
  • Update to check script checkzlib.ksh to use the TOOLBOX file to determine the latest version.
  • Update to check script checkzip.ksh to use the TOOLBOX file to determine the latest version.
  • Update to check script checkvnc.ksh to use the TOOLBOX file to determine the latest version.
  • Update to check script checkunzip.ksh to use the TOOLBOX file to determine the latest version.
  • Update to check script checksudoversion.ksh to use the TOOLBOX file to determine the latest version.
  • Update to check script checkrsynclevel.ksh to use the TOOLBOX file to determine the latest version.
  • Update to check script checklibtiff.ksh to use the TOOLBOX file to determine the latest version.
  • Update to check script checklibpng.ksh to use the TOOLBOX file to determine the latest version.
  • Update to check script checklibpaper.ksh to use the TOOLBOX file to determine the latest version.
  • Update to check script checklibjpeg.ksh to use the TOOLBOX file to determine the latest version.
  • Update to check script checkless.ksh to use the TOOLBOX file to determine the latest version.
  • Update to check script checkhttpd.ksh to use the TOOLBOX file to determine the latest version.
  • Update to check script checkgnutar.ksh to use the TOOLBOX file to determine the latest version.
  • Update to check script checkgmp.ksh to use the TOOLBOX file to determine the latest version.
  • Update to check script checkgettext.ksh to use the TOOLBOX file to determine the latest version.
  • Update to check script checkgcccpp.ksh to recommend the updated version for gcc-cpp of 8.1.0 as available in the AIX Toolbox for Linux Applications.
  • Update to check script checkgcc.ksh to recommend the updated version for gcc of 8.1.0 as available in the AIX Toolbox for Linux Applications.
  • Update to check script checklibstdc.ksh to recommend the updated version for libstdc++ of 8.1.0 as available in the AIX Toolbox for Linux Applications.
  • Update to check script checklibgcc.ksh to recommend the updated version for libgcc of 8.1.0 as available in the AIX Toolbox for Linux Applications.
  • Update to check script checkexpect.ksh to use the TOOLBOX file to determine the latest version.
  • Update to check script checkenscript.ksh to use the TOOLBOX file to determine the latest version.
  • Update to check script checkcurl.ksh to use the TOOLBOX file to determine the latest version.
  • Update to check script checkcurl.ksh to use the TOOLBOX file to determine the latest version.
  • Update to check script checkcpio.ksh to use the TOOLBOX file to determine the latest version.
  • Update to check script checkcoreutils.ksh to use the TOOLBOX file to determine the latest version.
  • Update to check script checkbzip2.ksh to use the TOOLBOX file to determine the latest version.
  • Update to check script checkbash.ksh to use the TOOLBOX file to determine the latest version.
  • Update to check script checkwget.ksh to use the TOOLBOX file to determine the latest version.
  • Inclusion of the TOOLBOX file, which is a complete listing of all the latest RPM packages available in the AIX Toolbox for Linux Applications.
  • Update to check script checkcompellentshowtimervalue.ksh to redirect errors to stdout instead of file 1, which was a typo.
  • Update to check script checkrperf.ksh to allow it to work with the regular Korn Shell instead of ksh93.
Version: 19.03.21
  • New check script checkntpservers.ksh to check if the configured NTP servers can be used for time synchronization.
  • Update of check script checksystemfirmwarelevel.ksh for newly available system firmware for Power9 systems.
Version: 19.03.11
  • Addition of the LICENSE file to the package.
Version: 19.01.23
  • Update to check script checkbusydisk.ksh to improve the output of the check script.
Version: 19.01.02
  • Copyright update of the UNIX Health Check for AIX package from 2018 to 2019.
Version: 18.12.22
  • New check script checkhomedirperms.ksh to check the permissions, owner and group of the home directory of root.
  • Update to check script checkroothomedir.ksh to exit if the home directory of user root does not exist.
Version: 18.12.14
  • Update to check script checkdevconsole.ksh to redirect any errors of ls to /dev/null, so no error will be displayed on the screen if /dev/console does not exist.
Version: 18.12.11
  • Update to check script checkhighcpu.ksh to ensure an error is reported if processes with high CPU usage are detected.
Version: 18.12.10
  • Update to check script checknfsconfig.ksh to update the description of the check script to provide additional information on how to view both exported and mounted NFS file systems.
Version: 18.12.05
  • Update to check script checkdnsdomain.ksh to improve the output of the check script.
  • Removed check script checkdev.ksh, because script checkdevperms.ksh includes the same functionality.
Version: 18.12.04
  • Renamed check script checkmnt.ksh to checkmntperms.ksh as the script checks the permissions of the /mnt folder.
Version: 18.12.01
  • Update to check script checkpowerhalevel.ksh to recommend new available service packs for PowerHA SystemMirror 7.2.0, 7.2.1 and 7.2.2.
  • Update to the description of check script checkoratab.ksh to include information about what file /etc/oratab is used for.
  • Update to the description of check script checkoratabpaths.ksh to include information about what file /etc/oratab is used for.
  • Update to the description of check script checkauthorizedkeysentries.ksh to include information what the authorized_keys files are used for.
  • Update to the description of check script checkauthorizedkeysentriesoracle.ksh to include information what the authorized_keys files are used for.
  • Update to check script checkauthorizedkeysdups.ksh to remove an error in an awk command.
  • Update to check script checkauthorizedkeysdupsoracle.ksh to remove an error in an awk command.
Version: 18.11.30
  • Update to check script checkpwd.ksh to improve the output of the script and adjust the description of the check script.
  • Update to check script checkrhosts.ksh to improve the output of the script.
Version: 18.11.29
  • Update to check script checkregularfilesinhome.ksh to improve upon the output of the check script.
  • Renamed check script checksbin.ksh to checksbinperms.ksh, as the script checks the permissions of folder /sbin.
Version: 18.11.27
  • Update to check script checkoslevel.ksh to update recommended service packs for AIX 7.2.
  • New check script checketcsecuritypasswdperms.ksh to check the permissions of /etc/security/passwd.
  • New check script checketcsecuritypasswdused.ksh to check if the shadow file /etc/security/passwd is used for storing passwords.
  • Update to check script checksimpanaactive.ksh to update the purpose description within the check script.
  • Update to check script checksuodersusers.ksh to improving checking for the existence of user accounts known in the /etc/sudoers file.
Version: 18.11.26
  • Update to check script checksudovisudopermissions.ksh to remove an unnecessary space.
  • Update to check script checksudopermissions.ksh to remove an unnecessary space.
Version: 18.11.25
  • Update to the description of check script checkvnbserver.ksh to correct a typo.
Version: 18.11.23
  • Update to the description of check script checkcaaservices.ksh to remove an empty line.
Version: 18.11.22
  • Update to check script checkall.ksh to improve the HTML output of the report - better consistency of the fonts used; better readability on mobile devices; better scaling with Microsoft Outlook.
Version: 18.11.20
  • Update to check script checkviosioslevel.ksh to recommend version 3.1.0.x of the PowerVM Virtual I/O Server to be installed, and if version 2.2 is used to at least upgrade to version 2.2.6.20
  • Update to check script checkviosioslevel.ksh to recommend version 3.1.0.x of the PowerVM Virtual I/O Server to be installed, and if version 2.2 is used to at least upgrade to version 2.2.6.
Version: 18.11.19
  • Update to check script checksystemfirmwarelevel.ksh for updated system system firmware levels for Power8 and Power9 hardware.
Version: 18.11.16
  • Update to check script checketchosts.ksh to allow a greater number of locally defined entries in /etc/hosts.
Version: 18.11.01
  • Update to check script checketherchannel.ksh to add some additional lines of output to the script for description purposes.
Version: 18.10.24
  • Update of the demo version to include the first 100 check scripts of the full version.
Version: 18.10.19
  • Update to check script checkpgspusagevsmemory.ksh to correct a comment within the script.
Version: 18.10.03
  • Update to check script checksystemfirmwarelevel.ksh in response to an updated system firmware release by IBM for Power9 systems.
  • Update to check script checkoslevel.ksh to check for the latest service packs for AIX 6.1 TL9, AIX 7.1 TL4, AIX 7.1 TL5, AIX 7.2 TL0, AIX 7.2 TL1, AIX 7.2 TL2 and AIX 7.2 TL3.
Version: 18.10.02
  • Update to check script checksendmailsmtp.ksh to avoid checking for a DNS entry for the SMTP server, if brackets are used in the DS entry in /etc/sendmail.cf, as using brackets in the DS entry results in sendmail not doing any DNS verification of the SMTP server.
Version: 18.09.20
  • Update to check script checkjavalevels.ksh to check for the latest Java levels to be installed per the Java July 2018 advisory.
Version: 18.09.18
  • Update to check script checkrperf.ksh to update it to version 37, as released by IBM in September 2018, which includes rperf values for Power9 Enterprise E950 and E980 systems.
Version: 18.08.22
  • Update to check script checkall.ksh to include the -t check script time-out option.
Version: 18.07.13
  • Update to check script checkcompellentdssslevel.ksh to recommend version 3.0.2.5 of the Dell Storage Suite for AIX to be installed, if Dell Compellent storage is used.
  • Update to check script checklssrc.ksh to provide an improved output, especially if the inittab entry differs from the resource controller entry.
  • Update to check script checkpowerhalevels.ksh to ignore any entries for fileset cluster.es.smui.server, which can be safely ignored, as it is okay to have this fileset installed on just one of the PowerHA nodes within a cluster.
  • Update to check script checkpowerhapackages.ksh to ignore any entries for fileset cluster.es.smui.server, which can be safely ignored, as it is okay to have this fileset installed on just one of the PowerHA nodes within a cluster.
  • New check script checkpowerhasmui.ksh to check if the PowerHA System Management User Interface packages are installed.
  • Update to check script checkall.ksh to allow check scripts to run for 180 seconds instead of 120 seconds.
  • Update to check script checklibgcc.ksh to check for the new version of libgcc, version 6.3.0 on AIX 6.1 and AIX 7.1, and version 7.2.0 on AIX 7.2.
  • Update to check script checklibstdc.ksh to check for the new version of libstdc++, version 6.3.0 on AIX 6.1 and AIX 7.1, and version 7.2.0 on AIX 7.2.
  • New check script checkgcc.ksh to check if the correct level of gcc RPM is installed.
  • New check script checkgcccpp.ksh to check if the correct level of gcc-cpp RPM is installed.
  • New check script checkcpio.ksh to check if the correct level of cpio RPM is installed.
  • New check script checkexpect.ksh to check if the correct level of expect RPM is installed.
Version: 18.07.11
  • Update to check script checkpowerhalevel.ksh to mark version 7.1.3 as out of support by IBM.
Version: 18.07.10
  • Update to check script checkpowerhanetmoncf.ksh to check both the old and new type entries in netmon.cf if PowerHA 7 or up is used.
  • Update to check script checkpowerhanetmoncf.ksh to check that also VLAN type adapters are considered as a virtual type of adapter.
Version: 18.07.09
  • Update to check script checkrperf.ksh to update it to version 36, as released by IBM, which includes rperf values for Power9 systems.
Version: 18.07.06
  • Update to check script checkzombies.ksh to improve the output.
Version: 18.07.05
  • Update to check script checkjavalevels.ksh to recommend the latest available levels for IBM AIX Developer Kit and Runtine, Java Technology Edition.
Version: 18.07.03
  • Update to check script checkopenssllevel.ksh to recommend a new level of OpenSSL, version 1.0.2.1500 (1.0.2o).
  • Update to check script checkopensshlevel.ksh to recommend a new level of OpenSSH, version 7.5.102.1500.
Version: 18.07.02
  • Update to check script checkpowerhalevel.ksh to recommend a new service pack (SP1) for PowerHA version 7.2.2.
Version: 18.05.30
  • Update to check script checksystemfirmwarelevel.ksh to recommend a newly available firmware level for Power7 and Power9 hardware, in response to CVE-2018-3639, the Speculative Store Bypass vulnearbility.
Version: 18.05.28
  • New check script checksnmpdconfperms.ksh to check the permissions of the SNMP configuration files.
  • Update to check script checksnmp.ksh to improve reporting on SNMP public community name information.
  • Update to check script checksystemfirmwarelevel.ksh to recommend new available system firmware levels for Power7 and Power8 systems, to address Speculative Store Bypass vulnerabilities.
Version: 18.05.27
  • Update to check script checkrperf.ksh to add missing Power8 system 8284-22A_30.
  • New check script checksambatestparm.ksh to run Samba's testparm utility to check the correctness of the the Samba configuration file.
  • Update to check script checkbash64.ksh to avoid reporting an error if bash_64 is not installed.
  • Update to check script checkenscript.ksh to avoid reporting an error if enscript is not installed.
  • Update to check script checkghostscript.ksh to avoid reporting an error if enscript is not installed.
  • Update to check script checksanpvid.ksh to avoid reporting an error on fileset cluster.es.server.rte, if not installed.
  • Update to check script checkunzip.ksh to avoid reporting an error if unzip is not installed.
  • Update to check script checkwget.ksh to avoid reporting an error if wget is not installed.
  • Update to check script checkzip.ksh to avoid reporting an error if zip is not installed.
  • Update to check script checkbootlist.ksh to avoid reporting an error if a network interface entry is listed in the bootlist.
  • Update to check script checkvartmp.ksh to only list the first 100 files found in /var/tmp, instead of the entire listing.
Version: 18.05.14
  • Update to check script checkpowerhalevel.ksh to recommend new PowerHA service packs available for PowerHA versions 7.1.3, 7.2.0 and 7.2.1.
Version: 18.05.07
  • Update to check script checksystemfirmwarelevel.ksh to recommend a newly available firmware level for Power8 hardware, in response to CVE-2018-3639, the Speculative Store Bypass vulnearbility.
Version: 18.05.02
  • Update to check script checkall.ksh to add the model types of the new Power9 systems released by IBM.
  • Update to check script checkhardwaresupport.ksh to add the necessary code for Power9 hardware support.
  • Update to check script checkpowervsaix.ksh to check the required AIX and VIOS levels for Power9 hardware.
  • Update to check script checksystemfirmwarelevel.ksh to check for the Power9 recommended system firmware level.
Version: 18.04.25
  • Update to the description of check script checkshowmount.ksh to add information on the use of the showmount and netstat commands.
Version: 18.04.10
  • Update of check script checkresolvconf.ksh to include testing the time it takes to perform a nslookup command.
Version: 18.04.09
  • Update to check script checkcrontabcommands.ksh to properly check for any crontab commands located in /tmp.
  • Update to the description of check script checkcrontabs.ksh to explain where the crontab files are stored.
Version: 18.04.08
  • New check script checkdevperms.ksh to check the permissions, owner and group of /dev.
  • New check script checkatallowperms.ksh to check the permissions of file /var/adm/cron/at.allow.
  • New check script checkatdenyperms.ksh to check the permissions of file /var/adm/cron/at.deny.
  • New check script checkcronallowperms.ksh to check the permissions of file /var/adm/cron/cron.allow.
  • New check script checkcrondeny.ksh to check the permissions of file /var/adm/cron/cron.deny.
  • New check script checkcronqueuedefs.ksh to check the permissions of file /var/adm/cron/queuedefs.
Version: 18.04.03
  • Update to the description of check script checksudosh.ksh to improve the description.
Version: 18.04.02
  • Update to check script checksshd.ksh to alert with an error is user sshd is not a member of group sshd.
Version: 18.03.30
  • New check script checkexpireduseraccounts.ksh to list any user accounts that have expired.
  • Update to check script checkgecos.ksh to avoid checking user account nuucp as well.
  • Update to the description of check script checkhomedirs.ksh.
Version: 18.03.27
  • Update to check script checkoslevel.ksh to recommend new service packs for AIX 6.1, AIX 7.1 and AIX 7.2.
Version: 18.03.26
  • Update to check script checksuid.ksh to exclude mmfs (GPFS/Spectrum Scale) type file systems from checking.
  • Update to check script checkcoredumps.ksh to exclude mmfs (GPFS/Spectrum Scale) type file systems from checking.
  • Update to check script checkdevicefilesoutsidedev.ksh to exclude mmfs (GPFS/Spectrum Scale) type file systems from checking.
  • Update to check script checkdirsworldwriteable.ksh to exclude mmfs (GPFS/Spectrum Scale) type file systems from checking.
  • Update to check script checkdsmerrorlog.ksh to exclude mmfs (GPFS/Spectrum Scale) type file systems from checking.
  • Update to check script checkfsdirwrite.ksh to exclude mmfs (GPFS/Spectrum Scale) type file systems from checking.
  • Update to check script checkfswrite.ksh to exclude mmfs (GPFS/Spectrum Scale) type file systems from checking.
  • Update to check script checkjfs2.ksh to exclude mmfs (GPFS/Spectrum Scale) type file systems from checking.
  • Update to check script checkmanualfs.ksh to exclude mmfs (GPFS/Spectrum Scale) type file systems from checking.
  • Update to check script checkmissingowners.ksh to exclude mmfs (GPFS/Spectrum Scale) type file systems from checking.
  • Update to check script checknoatime.ksh to exclude mmfs (GPFS/Spectrum Scale) type file systems from checking.
  • Update to check script checkossvfs.ksh to exclude mmfs (GPFS/Spectrum Scale) type file systems from checking.
  • Update to check script checkossvfsnb.ksh to exclude mmfs (GPFS/Spectrum Scale) type file systems from checking.
Version: 18.03.09
  • Update to check script checksystemfirmwarelevel.ksh to recommended newly released system firmware levels for Power7 and Power7+ systems.
Version: 18.03.06
  • New check script checkvlans.ksh to display the configuration of the VLANs on the server, if any.
  • Update to check script checketherchannelip.ksh to allow it to work properly if the IP address has been configured on a VLAN adapter that sits on top of an EtherChannel device.
  • Update to check script checknmapportscan.ksh to add a --host-timeout option to the nmap command to avoid running for a long time.
  • Update to check script checkall.ksh to add a warning to the logfile output if a check script takes longer than 120 seconds to complete.
Version: 18.03.01
  • Update to new computing environment.
Version: 18.02.22
  • New check script checketcresolvconf.ksh to display the contents of /etc/resolv.conf.
Version: 18.02.12
  • New check script checkspectremeltdown.ksh to check if the system has been properly patched for the Spectre and Meltdown vulnerabilities.
  • Update to check script checkviosioslevel.ksh to provide new recommendations on the installed PowerVM Virtual I/O Server (VIOS) level.
Version: 18.02.08
  • Update to check script checksystemfirmwarelevel.ksh to check for newly release Power7 and Power7+ system firmware levels to address the Meltdown and Spectre security vulnerabilities.
  • Update to check script checkftpusers.ksh to not alert if ftp is not enabled in /etc/inetd.conf.
Version: 18.02.07
  • Update to check script checkpowerhalevel.ksh to provide new recommendations for updated service pack levels for PowerHA version 7.
Version: 18.02.06
  • Update to the description of check script checkpowerhadiskattributes.ksh to provide information on how to update the attributes of a disk device when the device is in use.
Version: 18.02.05
  • New check script checkpowerhadiskattributes.ksh to check if the disk attributes on both nodes of a PowerHA/HACMP cluster are set the same.
  • New check script checkhardwaresupport.ksh to check the hardware support status.
  • New check script checkhcheckmodealigned.ksh to check if the hcheck_mode attribute of any disk has been set to the same value for all disks of the same type.
  • New check script checkalgorithmaligned.ksh to check if the algorithm attribute of any disk has been set to the same value for all disks of the same type.
  • New check script checkresrvepolicyaligned.ksh to check if the reserve_policy attribute of any disk has been set to the same value for all disks of the same type.
Version: 18.02.02
  • New check script checkhcheckintervalaligned.ksh to check if the hcheck_interval attribute of any disk has been set to the same value for all disks of the same type.
  • Update to check script checkmaxtransferaligned.ksh to improve the output of the check script and indicate any different max_transfer attributes, if any.
  • Update to check script checkqueuedepthaligned.ksh to improve the output of the check script and indicate any different queue_depth attributes, if any.
Version: 18.02.01
  • New check script checkmaxtransferaligned.ksh to check if the max_transfer disk attribute is aligned for all disks of the same type.
Version: 18.01.26
  • Calculate MD5 has of UNIX Health Check for AIX pacakage automatically.
  • Update to check script checkoslevel.ksh to account for newly available service packs.
Version: 18.01.15
  • Update to check script checksystemfirmwarelevel.ksh for recommended system firmware updates, to mitigate the Spectre and Meltdown threats.
  • Update to check script checkrperf.ksh to update it to version 34, which corrects a printf statement.
Version: 18.01.02
  • Update to check script checkoslevel.ksh to check for updated technlogoy levels for AIX 7.1 (TL5) and AIX 7.2 (TL2).
  • Update to check script checkopenssllevel.ksh to check for an updated version of OpenSSL (1.0.2.1300).
  • Update to check script checkopensshlevel.ksh to check for an updated version of OpenSSH (7.5.102.1100).
  • Update to check script checksystemfirmwarelevel.ksh to check for updated Power7 and Power8 system firwmare levels.
Version: 18.01.01
  • Copyright update of the UNIX Health Check for AIX package from 2017 to 2018.
Version: 17.12.24
  • New check script checkhistsize.ksh to check the value of HISTSIZE.
Version: 17.10.23
  • New check script checkmountguard.ksh to check if cluster JFS2 file systems are protected using the mountguard option.
  • Update to check script checkcompellentdssslevel.ksh to check for the latest version of the Dell Storage Software Suite for AIX, version 3.0.1.6.
  • Update to check script checktmpexecutables.ksh to avoid reporting on file /tmp/clevmgrd.stderr, which is part of PowerHA 7.2.
  • Update to check script checkhomedirs.ksh to avoid generating an error when the cllsfs command displays an empty file system entry, as seen in PowerHA 7.2.
Version: 17.09.26
  • New check script checkpacketloss.ksh to check if packet loss can be detected when pinging the default gateway.
Version: 17.09.20
  • Update to check script checkcurl.ksh to check for the latest version of curl (7.54) available in the AIX Toolbox for Linux Applications.
  • Update to check script checkhttpd.ksh to check for the latest version of httpd (2.4.27) available in the AIX Toolbox for Linux Applications.
  • Update to check script checklibstdc.ksh to check for the correct level of libstdc++ (6.3.0) for AIX 6.1 and up, available in the AIX Toolbox for Linux Applications.
  • Update to check script checklibgcc.ksh to check for the correct level of libgcc (6.3.0) for AIX 6.1 and up, available in the AIX Toolbox for Linux Applications.
  • Update to check script checksudoversion.ksh to check for the latest version of sudo (1.8.20) available in the AIX Toolbox for Linux Applications.
  • Update to check script checksambalevel.ksh to check for the latest version of samba (4.6.4) available in the AIX Toolbox for Linux Applications.
Version: 17.09.19
  • Update to the UNIX Health Check for AIX package to align with the update of the website to https instead of http.
Version: 17.09.05
  • Update to check script checksystemfirmwarelevel.ksh to check for a newly released Power8 system firmware level.
  • Update to the description of check script checkjavalevel.ksh to indicate where to download the latest fixes for Java for AIX.
Version: 17.08.30
  • Update to check script checkhiperapars.ksh to avoid reporting duplicate APARs if IBM specified the same APAR number for different OS levels.
Version: 17.08.23
  • Update to check script checknmapportscan.ksh to remove unnecesary lines and avoid displaying errors.
  • Update to check script checklsof.ksh to allow both the fileset and RPM version of lsof to be installed and used.
  • Update to check script checkbash.ksh to check for bash version 4.4 (from Perzl.org) or version 4.3.30 (from the AIX Toolbox for Linux applications).
  • Update to check script checkgettext.ksh to check for gettext version 0.17 (from Perzl.org) or version 0.19.7 (from the AIX Toolbox for Linux applications).
Version: 17.08.22
  • Update to check script checkwget.ksh to check for wget version 1.19.1 (from Perzl.org) or version 1.17.1 (from the AIX Toolbox for Linux applications).
  • Update to check script checksudoversion.ksh to check for sudo version 1.8.20 (from Perzl.org) or version 1.8.15 (from the AIX Toolbox for Linux applications).
  • Update to check script checklibstdc.ksh to check for libstdc++ version 4.8.3 (from Perzl.org) or version 4.8.5 (from the AIX Toolbox for Linux applications).
  • Update to check script checklibpng.ksh to check for libpng version 1.6.31 (from Perzl.org) or version 1.6.27 (from the AIX Toolbox for Linux applications).
  • Update to check script checklibgcc.ksh to check for libgcc version 4.8.3 (from Perzl.org) or version 4.8.5 (from the AIX Toolbox for Linux applications).
  • Update to check script checkgnutar.ksh to check for the latest GNU tar version from the AIX Toolbox for Linux applications, version 1.29.
  • Update to check script checkgmp.ksh to check for gmp installed at either version 5.1.2 (from AIX Toolbox for Linux applications) or 6.0.0 (from Perzl.org).
  • Update to check script checkcurl.ksh to check for the latest version of curl installed, either version 7.53 or version 7.55.
  • Update to check script checkbash64.ksh to check for bash64 version 4.4.
  • Update to check script checkxlclevel.ksh to recommend ethe latest version of the XL C/C++ Runtime for AIX, version 13.1.3.3.
  • Update to check script checkxivhaklevel.ksh to recommend version 2.8.0 of the IBM Storage Host Attachment Kit for AIX.
  • Update to check script checkviosioslevel.ksh to recommend updating a VIOS to at least version 2.2.5x.
  • Update to check script checksystemfirmwarelevel.ksh to check for newly release IBM system firmware levels for Power7 and Power7+ systems.
  • Update to check script checksddpcmlevel.ksh to recommend SDDPCM level 2.7.0.0.
  • Update to check script checkpatrollevel.ksh to recommend verison 3.8.50i of the BMC Patrol Agent.
  • Update to check script checkopenssllevel.ksh to check for the latest version of OpenSSL, version 1.0.2k, VRMF: 1.0.2.1100.
  • Update to check script checkopensshlevel.ksh to check for the latest version of OpenSSH, version 7.1p1, VRMF: 7.1.102.1100.
  • Update to check script checknmaplevel.ksh to check for the latest version of NMAP, version 6.00.
  • New check script checktmspagingspace.ksh to check if there is at least 32 GB of paging space on a system running Tivoli Storage Manager / IBM Spectrum Protect.
  • New check script checktsmame.ksh to check if Active Memory Expansion is disabled when running Tivoli Storage Manager / IBM Spectrum Protect.
  • Update to check script checklsoflevel.ksh to keep in line with the AIX Web Download pack version of lsof.
Version: 17.08.21
  • Update to check script checkjavalevels.ksh to check for the latest Java levels to be installed. Also added a check for Java8, and added a remark for Java5 being out of support.
  • Update to check script checkjavalevel.ksh to add some comments to the script about the available Java levels.
  • Update to check script checkgnupglevel.ksh to recommend using the latest version of GnuPG, version 1.4.22-1.
  • Update to check script checkgangliagmondlevel.ksh to recommend the latest Ganglia gmond version to be installed.
  • Update to check script checkgangliagmetadlevel.ksh to recommend the latest Ganglia gmetad version to be installed.
  • Update to check script checkfirefoxlevel.ksh to recommend version 3.6.
  • Update to check script checkemcpowerpathlevel.ksh to recmmend new levels for EMC PowerPath.
  • Update to check script checkemcodmlevel.ksh to recommend new EMC ODM definitions levels for Dell EMC attached storage.
  • Update to check script checkemcnavispherelevel.ksh to recommend a new level of the EMC NaviSphere Host agent to be installed.
  • Update to check script checkdevicesfcplevel.ksh to update the recommended version of the AIX SDDPCM Host attachment device software devices.fcp.disk.ibm.mpio.rte.
  • Update to check script checktsmlevel.ksh to add an extra method to check the TSM / IBM Spectrum Protect server level, and updating the way the TSM client version is identified, as it has been renamed by IBM from TSM to IBMSP.
  • Update to check script checktsmbackup.ksh to add the full path to the dsm.sys file in the output presented by the script.
Version: 17.08.20
  • Update to check script checksanpvid.ksh to avoid checking PowerHA repository disks as they may not be assigned to any volume group.
Version: 17.08.17
  • Update to check script checklspath.ksh to add comments to the output.
Version: 17.08.15
  • New check script checkntpdatentppool.ksh to check the time offset of the server versus a stratum 2 internet time server.
  • Update to check script checkntpdate.ksh to only query the NTP offset status, and not attempt to change it.
Version: 17.08.11
  • New check script checkpowerharepositories.ksh to display the PowerHA/HACMP repository disks.
Version: 17.08.10
  • New check script checklspvu.ksh to display the disks on the system, along with the Unique device identifier (UDID) and Universally Unique Identifier (UUID).
Version: 17.08.09
  • Update to checkcommonfilesets.ksh to suggest fewer filesets to be de-installed, when PowerHA 7.2 is used on the system, as AIX Runtime Expert can be used by PowerHA 7.2, which requires certain filesets to be installed.
Version: 17.08.01
  • Update to check script checkauthorizedkeys.ksh to only display output if any output from the authorized_keys file is to be displayed, especially in cases with PowerHA cluster nodes, that are not yet configured in a PowerHA cluster.
  • New check script checkpowerhalevelinstalled.ksh to display the level of PowerHA (HACMP) installed.
  • Update to check script checkall.ksh to also display the output of "halevel -s" when available.
Version: 17.07.23
  • Update to check script checkpowerhacrontabs.ksh to avoid reporting differences in crontabs on PowerHA nodes when only spaces, comments or tabs are different.
Version: 17.07.19
  • Update to check script checkoslevel.ksh to recommend upgrading to AIX 7.2 when AIX 7.1 is installed.
  • New check script checkrpmduplicates.ksh to check for any RPM packages that were installed multiple times.
  • Update to check script checkpowerhalevel.ksh to update certain recomendations for PowerHA levels, as some of the PowerHA levels have moved to End-of-Service-Pack mode.
  • Update to check script checkpowerhaconfigfiles.ksh to remove checking for differences beteen the /etc/filesystems on two nodes of a PowerHA SystemMirror/HACMP cluster.
  • New check script checkpowerhaetcfilesystems.ksh to compare the stanzas in /etc/filesystems on two nodes of a PowerHA SystemMirror/HACMP cluster.
Version: 17.07.18
  • Update to check script checknonlocsrcroute.ksh to no longer recommend making changes on PowerHA/HACMP nodes regarding this network option, as later versions of PowerHA SystemMirror no longer require this option to be set.
  • Update to check script checknfsclientdaemons.ksh to only alert about an empty /etc/exports file if the server is not a NIM server.
  • Update to check script checkinstalldate.ksh to remove an error with a missing fi statement.
  • Update to check script checkzlib.ksh to check for an updated version of zlib installed on the system. A new version of zlib (1.2.11) is available in the AIX Toolbox for Linux Applications.
  • Update to check script checksambalevel.ksh to check for an updated version of samba installed on the system. A new version of samba (4.5.7) is available in the AIX Toolbox for Linux Applications.
  • Update to check script checkrsynclevel.ksh to check for an updated version of rsync installed on the system. A new version of rsync (3.1.2) is available in the AIX Toolbox for Linux Applications.
  • Update to check script checklibstdc.ksh to make a different recommendation for AIX 6.1 for the level of libstdc to be installed, as different levels of libstdc are available in the AIX Toolbox for Linux Applications for AIX 7.x and AIX 6.1.
  • Update to check script checklibpng.ksh to check for an updated version of libpng installed on the system. A new version of libpng (1.6.27) is available in the AIX Toolbox for Linux Applications.
  • Update to check script checklibgcc.ksh to make a different recommendation for AIX 6.1 for the level of libgcc to be installed, as different levels of libgcc are available in the AIX Toolbox for Linux Applications for AIX 7.x and AIX 6.1.
  • Update to check script checkhttpd.ksh to check for an updated version of httpd installed on the system. A new version of httpd (2.4.25) is available in the AIX Toolbox for Linux Applications.
  • Update to check script checkcurl.ksh to check for an updated version of curl installed on the system. A new version of curl (7.53.1) is available in the AIX Toolbox for Linux Applications.
  • Update to check script checkpowerhalevel.ksh to update for PowerHA 7.2.
  • Update to check script checkoslevel.ksh to update for new service packs released for AIX 7.2.
  • Update to check script checkall.ksh to improve on determining the fully qualified domain name, avoiding two or more domain names when those are present in /etc/resolv.conf.
  • Update to check script checkcompellentdssslevel.ksh to make different recommendations for the level of the Dell Storage Software Suite to be installed, depending on the AIX OS level installed.
Version: 17.07.10
  • Update to check script checksystemfirmwarelevel.ksh to check for newly released system firmware levels for Power7+ and Power8 systems.
Version: 17.06.08
  • Update to check script checkall.ksh to avoid displaying a line in the header field of each check script, when using HTML output in Microsoft Outlook 2016.
  • Update to the package for the new release of website unixhealthcheck.com.
Version: 17.06.01
  • Update to check script checkall.ksh to remove duplicate spaces in comma separated output.
Version: 17.05.26
  • Update to check script checktmpexecutables.ksh to improve upon the way the output is prsented by the check script.
  • Update to check script checkexports.ksh to avoid reporting the same error on duplicate entries in /etc/exports.
  • Update to check script checkresolvconf.ksh to check for IP addresses listed for the search and domain entries in /etc/resolv.conf.
  • Update to check script checkall.ksh to filter out any IP addresses when the domain entry is determined from /etc/resolv.conf.
  • New check script checkgroup.ksh to display the contents of /etc/group.
  • New check script checkpasswd.ksh to display the contents of /etc/passwd.
  • Update to check script checketcgroupperms.ksh to also check if /etc/group exists and is not empty.
  • Update to check script checketcpasswdperms.ksh to also check if /etc/passwd exists and is not empty.
  • Update to check script checkvmo.ksh to no longer classify it as an inventory check script.
  • New check script checklslpphistory.ksh to lists the installation dates of all installed software packages.
  • Update to check script checkdb2folder.ksh to improve the output of the check script to indicate the DB2 installation folder.
  • Update to check script checkpowerhaclustertopology.ksh to check if the -m option is available with cltopinfo before displaying output. This option has been removed in later PowerHA levels.
  • Update to check script checkmajor.ksh to remove a typo.
Version: 17.05.25
  • Update to check script checkpowerhalogdirectory.ksh to only display the PowerHA logs that are written to /tmp.
  • Update to check script checklargefilesinrootvg.ksh to improve upon the way the output is presented.
  • Update to check script checkinstalldate.ksh to improve upon the way the output is presented.
  • Update to check script checksadc.ksh to exclude reporting the checksadc.ksh script itself as one of the running sadc processes.
  • Update to check script checkall.ksh to change certain echo commands to printf to improve the generated copyright message.
  • Update to check script checkgeoc.ksh to change the error to a warning message.
  • Update to check script checkcompellentlsvpd.ksh to remove an error in removing the temporary file.
  • Update to check script checkcompellentdssslevel.ksh to remove a typo in one of the comments.
Version: 17.05.19
  • Update to check script checkblankpassword.ksh to remove a typo in one of the comments.
Version: 17.05.18
  • New check script checkcfgscsidisk.ksh to check if there are long running cfgscsidisk processes on the system.
  • New check script checkcfgmgr.ksh to check if there are long running cfgmgr processes on the system.
Version: 17.05.17
  • Update to check script checkiddsapuboracle.ksh to also check the permissions of file ~oracle/.ssh/id_dsa.pub.
  • Update to check script checkiddsapub.ksh to also check the permissions of file ~root/.ssh/id_dsa.pub.
  • Update to check script checkviosidrsapubpadmin.ksh to also check the permissions of file /home/padmin/.ssh/id_rsa.pub.
  • Update to check script checkidrsapuboracle.ksh to also check the permissions of file ~oracle/.ssh/id_rsa.pub.
  • Update to check script checkdotsshperms.ksh to remove a typo in one of the comments.
  • Update to check script checkidrsapub.ksh to also check the permissions of file ~root/.ssh/id_rsa.pub.
Version: 17.05.15
  • Update to check script checkoslevel.ksh to recommend SP4 for AIX 7.1 TL4 and SP9 for AIX 7.1 TL3, which was released in April 2017.
Version: 17.05.12
  • Update to check script checkxmdaily.ksh to avoid reporting when both nmon and topasrec are active, as this is also checked by check script checknmon.ksh.
  • Update to check script checkusersettingsvsdefault.ksh to avoid reporting any messages about user account srvproxy as the user settings of srvproxy may be different from the default settings.
  • Update to check script checksystemgroup.ksh to allow user srvproxy to be part of the system group. The srvproxy user is set up as part of the bos.ecc_client.rte fileset.
  • Update to check script checksuid.ksh to exclude any file names that include both "sqllib" and "db2", as these are part of a DB2 database and are allowed to have a SUID bit set.
  • Update to the dscription of check script checkrootrloginfalse.ksh to explain what access is still available if rlogin is set to false for user root.
  • Update to check script checkpowerhasyncd.ksh to recommend a syncd frequency of (default) 60. In older versions of PowerHA (version HACMP 5 or below), it was recommended to set the syncd frequency to 10, but that is no longer requiered for new PowerHA levels.
  • Update to check script checkpowerhaioo.ksh to avoid alerting for I/O tunable aio_active, which has been made static by IBM.
  • Update to the description of check script checklsof.ksh to update the URL to the AIX Web Download Pack, where lsof can be downloaded, as the URL has changed on the IBM website.
  • Update to check script checklargefilesinrootvg.ksh to avoid alerting about any files that are explicitly excluded in /etc/exclude.rootvg.
  • Update to check script checksshpermitrootlogin.ksh to account for the change to the default value of PermitRootLogin in /etc/ssh/sshd_config, where the default has changed to "without-password" (from "yes") when using OpenSSH version 7 or up.
Version: 17.05.11
  • Update to check script checkopensshlevel.ksh to allow it to work on AIX 7.1 TL4.
  • Update to the description of check script checksendmailprivacyoptions.ksh explaining better which entry to replace.
Version: 17.05.10
  • Update to check script checkopensshlevel.ksh to recommend the new version 7.1.101.500 of openssh.
  • Update to the description of check script checkopenssllevel.ksh to update the link to the AIX Web Download Pack to a new location.
  • New check script checkcompellentdssslevel.ksh to check the level of the installed Dell Storage Software Suite for AIX.
  • New check script checkcompellentshowtimervalue.ksh to check the output of the Dell EMC SC / Compellent show_timer_value command.
  • New check script checkcompellentshowwwid.ksh to display the output of the Dell EMC SC / Compellent show_wwid command.
  • New check script checkcompellentdellscbootlist.ksh to check the output of the Dell EMC SC / Compellent dellsc_bootlist command.
  • New check script checkcompellentdellsctune.ksh to display the output of the Dell EMC SC / Compellent dellsc_tune command.
  • New check script checkcompellentlsvpd.ksh to display the output of the Dell EMC SC / Compellent ls_vpd command.
  • New check script checkcompellentlsdellsc.ksh to check if all paths to Dell EMC SC / Compellent storage disks are enabled by running the ls_dellsc command.
  • New check script checkcompellentmirroring.ksh to check if logical volumes on Dell Compellent storage are not mirrored, as Dell SC Series storage is already providing naitve RAID10 integrity and reliability, thus eliminating the need for mirroring logical volumes on Dell Compellent storage.
Version: 17.04.26
  • Update to check script checkpgspminsize.ksh to improve the provided output.
Version: 17.04.25
  • Update to the software to support the renaming of the software to UNIX Health Check for AIX.
Version: 17.04.17
  • Update to check script checkoslevel.ksh to recommend the latest service pack for AIX 6.1, Technology Level 9, Service Pack 9.
Version: 17.04.05
  • Update to check script checktsmservername.ksh to avoid displaying an error when the TSM nodename is not currently registered with the TSM server.
  • Update to check script checktmpexecutables.ksh to exclude checking for file /tmp/pfcdaemon.out, which is a log file of the newly introduced Power Flash Cache daemon, and can be ignored.
  • Update to check script checktotalsan.ksh to add an overview of PureStorage SAN storage; PureStorage is all-Flash storage and can be configured as MPIO on AIX.
  • New check script checkqueuedepthaligned.ksh to check if the queue_depth attribute of any disk has been set to the same value for all disks of the same type.
  • Update to check script checkqueuedepth.ksh to recommend a queue depth for SAN LUNs provided by Compellent storage.
  • Update to check script checktotalsan.ksh to add an overview of Dell Compellent SAN storage.
  • Update to the description of check script checkfscsidyntrk.ksh to elaborate on what dynamic tracking is and why it should be enabled on FC adapters.
  • Update to the description of check script checkmissingowners.ksh to add an additional folder for PowerHA software to the recommended list of folders to update permissions for.
  • Update to check script checkdevicefiles.ksh to avoid reporting file /dev/.StorageRM-Semaphore as this file is created by RSCT and thus is valid.
  • Update to check script checkdadapters.ksh to also include output of the physical locations of the adapters.
  • Update to check script checkdisks.ksh to also include output of the physical locations of the disks.