UNIX Health Check

Overview of updates - AIX version

Latest available version: 25.02.11

Overview of the most recent updates to UNIX Health Check for AIX:

Version: 25.02.11

Update to check script checkoslevel.ksh to recommend Service Pack 3 for AIX 7.3 Technology Level 2.

Version: 25.01.06

Update to all check scripts to update the copyright message for 2025.

Version: 24.12.12

Update to check script checkoslevel.ksh to recommend AIX 7.3 Technology Level 3.
Update to check script checkoslevel.ksh to recommend Service Pack 7200-05-09-2446 for Technology Level 7200-05.

Version: 24.07.18

Update to check script checkoslevel.ksh to recommend AIX 7.3 Technology Level 1 Service Pack 4.

Version: 24.07.15

Update to check script checkpowerhalevel.ksh to recommend new service pack levels for PowerHA SystemMirror.
Update to check script checkviosioslevel.ksh to recommend VIOS level 4.1.
Update to check script checkoslevel.ksh to recommend AIX 7.3 Technology Level 2 Service Pack 2 or AIX 7.2 Technology Level 5 Service Pack 8.

Version: 24.07.11

Update to the TOOLBOX file to indicate the correct versions of the apps listed in the AIX Toolbox for Linux Applications.

Version: 24.05.13

Update to check script checkall.ksh to correctly display the logfile name in the results section.

Version: 24.04.25

Update to check script checkpowerhalevel.ksh to adjust the recommendation for specific technology levels of PowerHA, as some technology levels are no longer supported by IBM, and a new release has been made available.

Version: 23.11.10

Update to check script checkoslevel.ksh to recommend Service Pack 1 for AIX 7.3 Technology Level 2, as well as a recommendation for Service Pack 7 for AIX 7.2 Technology Level 5. Besides that AIX 7.3 Technology Level 2 has been made available by IBM.

Version: 23.08.01

Update to check script checkoslevel.ksh to recommend Service Pack 4 for AIX 7.3 Technology Level 0, as AIX Service Pack 7300-00-04-2320 was released by IBM.

Version: 23.06.05

Update to check script checkpowerhalevel.ksh to recommend Service Pack 7.2.7.1 of PowerHA 7.2.7, among various other Service Packs released for other PowerHA releases.

Version: 23.05.23

Update to check script checkpowerhalevel.ksh to recommend Service Pack 7.2.4.7 of PowerHA 7.2.4.

Version: 23.04.28

Update to check script checkoslevel.ksh to recommend new Service Packs for technology levels 7200-05 and 7300-01.

Version: 23.03.10

Update to check script checkoslevel.ksh to recommend new Service Packs for technology levels 7300-00 and 7100-05.

Version: 23.02.09

New check script checklibxml2.ksh to check for the correct version of libxml2 installed.

Version: 23.02.05

Update to check script checkpowerhalevel.ksh to recommend new levels of PowerHA, as new technology levels and Service Packs have been released by IBM.
Update to check script checkoslevel.ksh to recommend new Service Packs for technology levels 7300-01 and 7200-05.
Update to check script checkviosioslevel.ksh to recommend a new level of PowerVM Virtual I/O Server.

Version: 22.07.20

Update to check script checkrperf.ksh to update the script to version 41, which was released on July 20, 2022 by Nigel Griffiths of IBM.

Version: 22.06.11

Update to check script checketchosts.ksh to avoid checking commented entries in /etc/hosts.

Version: 22.05.22

Update to check script checkviosioslevel.ksh to recommend a new level of PowerVM Virtual I/O Server.
Update to check script checkoslevel.ksh to recommend new Service Packs for AIX 7.2 Technology Level 5 (7200-05-04-2220) and AIX 7.3 Technology Level 0 (7300-00-02-2220).

Version: 22.05.17

Update to check script checkpowerhalevel.ksh for newly released Service Packs for PowerHA SystemMirror.

Version: 22.05.09

Update to check script checkopenssllevel.ksh to recommend level 8.1.102.2105 for OpenSSH.

Version: 22.05.04

Update to check script checksystemfirmwarelevel.ksh for new updates to POWER8, POWER9 and POWER10 system firmware.

Version: 22.04.12

Update to check script checkopenssllevel.ksh to recommend OpenSSL 1.1.1l (1.1.2.1200) to be installed on AIX 5.3, 6.1, 7.1, 7.2 and 7.3.

Version: 22.02.11

Update to check script checkoslevel.ksh to recommend a new fix pack for AIX 7.2, Technology Level 4, as Service Pack 5 was released by IBM.

Version: 22.01.06

Update to check script checkopensshlevel.ksh to recommend level 8.1.102.2104 for AIX 5.3, 6.1, 7.1, 7.2 and 7.3.

Version: 22.01.05

Update to the description of check script checkalgorithmaligned.ksh to include commands how to update the algorithm attribute for disk devices.
Update to check script checkaliases.ksh to check for additional aliases in /etc/mail/aliases on AIX 7.2.
Update to the description of check script checkbash.ksh to add additional commands regarding installing and upgrading bash.
Update to check script checkcommonfilesets.ksh to exclude the recommendation to de-install artex* filesets on AIX 7.2.
Update to the description of check script checkcurl.ksh to add additional commands regarding installing and upgrading curl.
Update to check script checkdefaultgateway.ksh to exclude any link default entries in the output of netstat.
Update to check script checkexpireduseraccounts.ksh to exclude user account smmsp.
Update to check script checkgidbelow100.ksh to exclude group smmsp.
Update to check script checklargefilesinrootvg.ksh to exclude checking /usr/lib/libicudata.a, which is larger than 100 MB on AIX 7.2 and higher.
Update to check script checkkrlogind.ksh to properly check for klogin and krlogin entries in /etc/inetd.conf.
Update to check script checkntpoffset.ksh to check if a NTP server can be determined before determining if the time offset is incorrect or not.
Update to check script checkopennfsexports.ksh to redirect the output of the host command to /dev/null in case the host name is not set in /etc/hosts.
Update to check script checkpinggateway.ksh to exclude checking IP address 0.0.0.0.
Update to the description of check script checkreservepolicyaligned.ksh to include commands that describe how to update the reserve_policy attribute for disk devices.
Update to check script checksendmailprivacyoptions.ksh to remove a space in the recommended privacy options.
Update to the description of check script checkshells.ksh to remove a backslash that is not needed.
Update to check script checksudocommands.ksh to exclude @includedir entries.
Update to the description of check script checksudoversion.ksh to provide a command that describes how to install sudo.
Update to check script checksulog.ksh to provide commands that describe how to create /var/adm/sulog if it doesn't exist.
Update to check script checksystemid.ksh to redirect the output of the host command to /dev/null in case a host name has not been set.
Update to check script checkuseraccounts.ksh to exclude user account smmsp.
Update to check script checkusersettingsvsdefault.ksh to exclude user account smmsp.
Update to check script checkwget.ksh to test /opt/freeware/bin/wget as well.
Update to check script checkinittaberrs.ksh to exclude entry rcvnet, as it will always exit with code 1.
Update to check script checksudopermissions.ksh to account for /opt/freeware/bin/sudo being a symbolic link to /opt/freeware/bin/sudo_32 in newer releases.
Update to check script checksudovisudopermissions.ksh to account for /opt/freeware/bin/visudo being a symbolic link to /opt/freeware/bin/visudo_32 in newer releases.

Version: 21.12.23

Update to check script checkrperf.ksh to update the script to version 40, which was released on December 13, 2021 by Nigel Griffiths of IBM.

Version: 21.12.13

Update to check script checkoslevel.ksh to recommend Service Pack 1 for AIX 7.3.

Version: 21.12.06

Update to check script checkpowerhalevel.ksh for a newly released Service Pack for PowerHA SystemMirror.

Version: 21.11.23

Update to check script checkpowerhalevel.ksh for newly released Service Packs for PowerHA SystemMirror.

Version: 21.10.11

Update to check script checksystemfirmwarelevel.ksh for newly release system firmware levesl for Power8 and Power9 systems.

Version: 21.09.28

Update to check script checkoslevel.ksh to recommend new Service Packs released for AIX 7200-05 and AIX 7200-05.

Version: 21.08.10

Update to check script checkpowerhalevel.ksh for the release of PowerHA 7.2.5.1 as the new latest level available for PowerHA.

Version: 21.07.06

Update to check script checkoslevel.ksh to recommend new Service Packs released for AIX 7200-04 and AIX 7200-03.

Version: 21.06.07

Update to check script checksystemfirmwarelevel.ksh to recommend a new version of the system firmware for Power9 systems.

Version: 21.05.04

Update to check script checkpowerhalevel.ksh to recommend new Service Pack levels for PowerHA 7.2.2, PowerHA 7.2.3 and PowerHA 7.2.4.

Version: 21.04.26

Update to check script checkoslevel.ksh to update recommended Service Packs for AIX 7.1 and AIX 7.2.

Version: 21.04.15

Update to check script checkopenssllevel.ksh to recommend the latest available level of OpenSSL due to possible vulnerabilities that affect AIX (CVE-2021-23839,CVE-2021-23840, and CVE-2021-23841).

Version: 21.03.11

Update to check script checkoslevel.ksh to recommend new Service Packs for AIX 7.2.
Update to check script checkviosioslevel.ksh to recommend version 3.1.2 of the Virtual I/O Server to be installed, now that version 2.2 of VIOS is no longer supported by IBM.
Update to check script checklibgcc.ksh to recommend version 8 of libgcc instead of version 8.3.0.
Update to check script checklibstdc.ksh to recommend version 8 of libstdc++ instead of version 8.3.0.

Version: 21.03.10

Update to check script checkbash.ksh to only make recommendations if the major version of Bash is different from what is installed.
Update to check script checkexpect.ksh to only make recommendations if the major version of Expect is different from what is installed.

Version: 21.03.05

Update to check script checksystemfirmwarelevel.ksh to recommend new available system firmware levels for Power8 and Power9 based sytems.

Version: 21.02.14

Update to check script checklibstdc.ksh to correct a typo.
Update to check script checkcurl.ksh to check the correct sections of the curl version to ensure that the check is correctly performed.

Version: 21.02.11

Update to check script checkgcc.ksh to recommend version 8.3.0 for gcc.
Update to check script checklibgcc.ksh to recommend version 8.3.0 for libgcc.
Update to check script checkgcccpp.ksh to recommend version 8.3.0 for gcc-c++.
Update to check script checklibstdc.ksh to recommend version 8.3.0 for libstdc++.

Version: 21.02.02

Update to check script checkopenssllevel.ksh to recommend Updating OpenSSL to 1.0.2.2100.
Update to check script checkopensshlevel.ksh to recommend updating OpenSSH to 8.1.102.2102.

Version: 21.01.18

Update to check script checkdfsummary to exclude NFS mounted file systems from being counted.
20.11.8
Update to check script checksddpcmlevel.ksh to recommend level 2.7.0.0 of SDDPCM.
Update to check script checkhomedirs.ksh to avoid reporting errors on empty lines in /etc/passwd.

Version: 20.11.16

Update to check script checkpowerhalevel.ksh to recommend new PowerHA Service Packs released by IBM for PowerHA.

Version: 20.11.13

Update to check script checkoslevel.ksh to recommend Technology Level 5 for AIX 7.2, and Service Pack 7 for AIX 7.1 Technology Level 5.
Update to check script checkcleansshdir.ksh to allow the config file within the ~root/.ssh folder.
Update to check script checkcleansshdiroracle.ksh to allow the config file within the ~oracle/.ssh folder.

Version: 20.11.11

Update to check script checkhostnamevsdns.ksh to ensure any multiple DNS entries are printed out as part of the output.
Update to check script checkloginherald.ksh to add a missing word in the output generated by the check script.

Version: 20.11.10

Update to check script checkbootlist.ksh to correctly display a message, even when a disk is part of a volume group with a name similar to rootvg.
Update to check script checkhostnamevsdns.ksh to work correctly if there are multiple DNS entries present for the IP address of the system.
Update to check script checkpatrollevel.ksh to check for version 11.3 of BMC Patrol Agent or higher.
Update to check script checkperlversion.ksh to fix checking the Perl version on AIX 7.1 TL1.

Version: 20.10.19

Update to check script checksystemfirmwarelevel.ksh to recommend new Power9 system firmware.

Version: 20.09.28

Update to check script checkemcpowerpathlevel.ksh to recommend updating Dell EMC PowerPath to version 7.0 P01.

Version: 20.08.28

Update to check script checkuptime.ksh to update the category of the check script.
Update to check script checkfailedlogins.ksh to generate a warning if any failed logins have been seen within the last 24 hours.

Version: 20.07.21

Update to check script checksystemfirmwarelevel.ksh to recommend new levels of Power9 system firmware.
Update to check script checkrperf.ksh to update it to version 38 of the rperf script, released on July 21, 2020.

Version: 20.07.20

Update to check script checkoslevel.ksh to recommend new Service Packs available for AIX 7.2.

Version: 20.06.30

Update to check script checkpowerhalevel.ksh to recommend PowerHA System Mirror 7.2.4, Service Pack 1, release by IBM on June 26, 2020.

Version: 20.06.15

Update to check script checkemcpowerpathlevel.ksh to recommend version 7.0 of Dell EMC PowerPath.

Version: 20.06.01

Update to check script checkpowerhalevel.ksh to recommend new Service Packs for PowerHA System Mirror 7.2.2 and 7.2.3.

Version: 20.05.15

Update to check script checkoslevel.ksh to recommend Service Pack 6 for AIX 7.1, Technology Level 5.

Version: 20.04.27

Update to check script checkemcpowerpathlevel.ksh to check for new available levels of Dell EMC PowerPath.
Update to check script checknroffilesinfilesystems.ksh to only report on local file systems.

Version: 20.04.26

Update to check script checkjavalevels.ksh per the recommendations of the IBM January 2020 security advisory.
Update to check script checkopensshlevel.ksh to recommend version OpenSSL 1.0.2t / OpenSSH-8.1p1 (VRMF: 8.1.102.2000) for AIX 5.3, 6.1, 7.1 and AIX 7.2.
Update to check script checkoslevel.ksh to update new recommended Service Packs for AIX 7.2.

Version: 20.04.25

Update to check script checkexports.ksh to avoid reporting on entries that start with a dash and to improve detection of duplicate entries.

Version: 20.04.24

Update to checkall.ksh to allow for files to be excluded within an external file with both short and full path file names.
Update to check script checkvarspoolperms.ksh to update the text on the error that is generated.
Update to check script checkdevtty.ksh to update the text on the error that is generated.
Update to check script checksecurityperms.ksh to update the text on the error that is generated.
Update to check script checkusrbincrontab.ksh to update the text on the error that is generated.
Update to check script checkusrperms.ksh to update the text on the error that is generated.
Update to check script checkusrsbincron.ksh to update the text on the error that is generated.
Update to check script checkvaradmcron.ksh to update the text on the error that is generated.
Update to check script checkvaradmperms.ksh to update the text on the error that is generated.
Update to check script checkvaradmrasperms.ksh to update the text on the error that is generated.
Update to check script checkvarempty.ksh to update the text on the error that is generated.
Update to check script checkvarspoolcronatjobsperms.ksh to update the text on the error that is generated.
Update to check script checkvarspoolcroncrontabsperms.ksh to update the text on the error that is generated.
Update to check script checkvarspoolcronperms.ksh to update the text on the error that is generated.
Update to check script checkvarspoollpdperms.ksh to update the text on the error that is generated.
Update to check script checkvarspoollpdqdirperms.ksh to update the text on the error that is generated.
Update to check script checkvarspoolmqueueperms.ksh to update the text on the error that is generated.
Update to check script checkvarspoolqdaemonperms.ksh to update the text on the error that is generated.
Update to check script checkvartmpperms.ksh to update the text on the error that is generated.
Update to check script checkuserkshrc.ksh to update the text on the error that is generated.
Update to check script checkusernetrc.ksh to update the text on the error that is generated.
Update to check script checkuserprofile.ksh to update the text on the error that is generated.
Update to check script checksudoersusers.ksh to exclude all empty lines of lines that start with a space, but are commented out.
Update to check script checksudoersduplicates.ksh to remove a typo.
Update to check script checkperlversion.ksh to recommend verions 5.28.1.
Update to check script checkoslevel.ksh to correct an error that would result in recommending to upgrade to the currently installed level.
Update to check script checkinstalldate.ksh to remove the first install date entry.
Update to check script checkcrontabatone.ksh to ignore lines starting with spaces and/or tabs in front of a comment character.
Update to check script checkcrontabattwo.ksh to ignore lines starting with spaces and/or tabs in front of a comment character.
Update to check script checkcrontabcommands.ksh to ignore lines starting with spaces and/or tabs in front of a comment character.
Update to check script checkcrontabcommandsexec.ksh to ignore lines starting with spaces and/or tabs in front of a comment character.
Update to check script checkcrontabdups.ksh to ignore lines starting with spaces and/or tabs in front of a comment character.
Update to check script checkexcluderootvg.ksh to ignore lines starting with spaces and/or tabs in front of a comment character.
Update to check script checkexcluderootvg.ksh to improve identification of duplicate lines in /etc/exclude.rootvg.

Version: 20.03.25

Update to checkall.ksh to allow providing text files listing scripts for both the -s (to include check scripts) and the -E (to exclude check scripts) options.

Version: 20.01.28

Update to check script checkemcodmlevel.ksh to add support for EMC Celerra and EMC XtremIO.

Version: 20.01.27

Update to check script checksanpvid.ksh to add an additional check to see if any disks are in use by Oracle.
Update to check script checkxntpd.ksh to check not only xntpdc output but also the output of ntpq to determine if the system is time synchronized.
Update to check script checkall.ksh to set a default for the output width in case stty -a reports 0 colums - which may happen on the console of a system.

Version: 20.01.24

Update to check script checksystemfirmwarelevel.ksh, to accomodate for newly released levels of system firmware for Power8 and Power9 systems.

Version: 20.01.06

Update of check script checkemcodmlevel.ksh to recommend EMC ODM Definitions (or AIX ODM Kit) 6.1.2.0 on AIX 6.1, AIX 7.1 and AIX 7.2.

Version: 20.01.02

Update to check script checkexports.ksh to exclude entries in /etc/exports that are commented out.

Version: 19.12.21

Update to check script checktemperature.ksh to improve the output generated by the script.

Version: 19.12.20

Update to check script checktemperature.ksh to correct a typo in the output sentence.

Version: 19.12.19

Update to check script checkpowerhalevel.ksh to recommend new available Service Pack for PowerHA 7.2.3.

Version: 19.12.17

Update to check script checknfsaccess.ksh to exclude GPFS file systems from being checked.
Update to check script checknfssoft.ksh to exclude GPFS file systems from being checked.
Update to check script checkfsvsetcfilesystems.ksh to exclude GPFS file systems from being checked.
Update to check script checknfsnosuid.ksh to exclude GPFS file systems from being checked.

Version: 19.12.12

Update to check script checkemcinq.ksh to ensure the script doesn't hang when there is a faulty fibre channel adapter.
Update to master check script checkall.ksh to remove a blank space in the inventory section.

Version: 19.12.09

Update to check script checkcrontabcommandsexec.ksh to avoid reporting an error if a command within a crontab file starts with a non-alphanumeric character.

Version: 19.12.07

Update to check script checkopenssllevel.ksh to recommend OpenSSL 1.0.2.2001 (1.0.2t).
Update to check script checkopensshlevel.ksh to recommend OpenSSH 7.5.102.2000 (OpenSSH-7.5p1).

Version: 19.11.19

Update to check script checknobodygroup.ksh to not report an error if user lpd is not a member of the group nobody.
Update to check script checkecho.ksh to redirect errors to /dev/null, in case inetd has been disabled on the system and/or /etc/inetd.conf does not exist.
Update to check script checkinetdconffile.ksh to redirect errors to /dev/null, in case inetd has been disabled on the system and/or /etc/inetd.conf does not exist.
Update to check script checkinetdcommands.ksh to redirect errors to /dev/null, in case inetd has been disabled on the system and/or /etc/inetd.conf does not exist.
Update to check script checkinetdcommandsexec.ksh to redirect errors to /dev/null, in case inetd has been disabled on the system and/or /etc/inetd.conf does not exist.
Update to check script checkinetdactive.ksh to redirect errors to /dev/null, in case inetd has been disabled on the system and/or /etc/inetd.conf does not exist.
Update to check script checkftpusers.ksh to redirect errors to /dev/null, in case inetd has been disabled on the system and/or /etc/inetd.conf does not exist.
Update to check script checkftplogging.ksh to redirect errors to /dev/null, in case inetd has been disabled on the system and/or /etc/inetd.conf does not exist.
Update to check script checkftpd.ksh to redirect errors to /dev/null, in case inetd has been disabled on the system and/or /etc/inetd.conf does not exist.
Update to check script checkfinger.ksh to redirect errors to /dev/null, in case inetd has been disabled on the system and/or /etc/inetd.conf does not exist.
Update to check script checkexec.ksh to redirect errors to /dev/null, in case inetd has been disabled on the system and/or /etc/inetd.conf does not exist.
Update to check script checkdiscard.ksh to redirect errors to /dev/null, in case inetd has been disabled on the system and/or /etc/inetd.conf does not exist.
Update to check script checkcomsat.ksh to redirect errors to /dev/null, in case inetd has been disabled on the system and/or /etc/inetd.conf does not exist.
Update to check script checkdaytime.ksh to redirect errors to /dev/null, in case inetd has been disabled on the system and/or /etc/inetd.conf does not exist.

Version: 19.11.18

Update to check script checkblankpassword.ksh to redirect errors to /dev/null, in case inetd has been disabled on the system and/or /etc/inetd.conf does not exist.
Update to check script checkbootps.ksh to redirect errors to /dev/null, in case inetd has been disabled on the system and/or /etc/inetd.conf does not exist.
Update to check script checkbgssd.ksh to redirect errors to /dev/null, in case inetd has been disabled on the system and/or /etc/inetd.conf does not exist.
Update to check script checkcaainetdconf.ksh to redirect errors to /dev/null, in case inetd has been disabled on the system and/or /etc/inetd.conf does not exist.
Update to check script checkcdeservices.ksh to redirect errors to /dev/null, in case inetd has been disabled on the system and/or /etc/inetd.conf does not exist.
Update to check script checkchargen.ksh to redirect errors to /dev/null, in case inetd has been disabled on the system and/or /etc/inetd.conf does not exist.
Update to check script checkftproot.ksh to redirect errors to /dev/null, in case inetd has been disabled on the system and/or /etc/inetd.conf does not exist.
Update to check script checkimap2.ksh to redirect errors to /dev/null, in case inetd has been disabled on the system and/or /etc/inetd.conf does not exist.
Update to check script checkinetdconf.ksh to redirect errors to /dev/null, in case inetd has been disabled on the system and/or /etc/inetd.conf does not exist.
Update to check script checkinetdconfcomments.ksh to redirect errors to /dev/null, in case inetd has been disabled on the system and/or /etc/inetd.conf does not exist.
Update to check script checkinetdactive.ksh to redirect errors to /dev/null, in case inetd has been disabled on the system and/or /etc/inetd.conf does not exist.
Update to check script checkinstsrv.ksh to redirect errors to /dev/null, in case inetd has been disabled on the system and/or /etc/inetd.conf does not exist.
Update to check script checkkrlogind.ksh to redirect errors to /dev/null, in case inetd has been disabled on the system and/or /etc/inetd.conf does not exist.
Update to check script checkkshell.ksh to redirect errors to /dev/null, in case inetd has been disabled on the system and/or /etc/inetd.conf does not exist.
Update to check script checknetstatinetd.ksh to redirect errors to /dev/null, in case inetd has been disabled on the system and/or /etc/inetd.conf does not exist.
Update to check script checkntalk.ksh to redirect errors to /dev/null, in case inetd has been disabled on the system and/or /etc/inetd.conf does not exist.
Update to check script checkpcnfsd.ksh to redirect errors to /dev/null, in case inetd has been disabled on the system and/or /etc/inetd.conf does not exist.
Update to check script checkrexd.ksh to redirect errors to /dev/null, in case inetd has been disabled on the system and/or /etc/inetd.conf does not exist.
Update to check script checkrlogin.ksh to redirect errors to /dev/null, in case inetd has been disabled on the system and/or /etc/inetd.conf does not exist.
Update to check script checkrootrsh.ksh to redirect errors to /dev/null, in case inetd has been disabled on the system and/or /etc/inetd.conf does not exist.
Update to check script checkrquotad.ksh to redirect errors to /dev/null, in case inetd has been disabled on the system and/or /etc/inetd.conf does not exist.
Update to check script checkrshd.ksh to redirect errors to /dev/null, in case inetd has been disabled on the system and/or /etc/inetd.conf does not exist.
Update to check script checkrstatd.ksh to redirect errors to /dev/null, in case inetd has been disabled on the system and/or /etc/inetd.conf does not exist.
Update to check script checkrusersd.ksh to redirect errors to /dev/null, in case inetd has been disabled on the system and/or /etc/inetd.conf does not exist.
Update to check script checkrwalld.ksh to redirect errors to /dev/null, in case inetd has been disabled on the system and/or /etc/inetd.conf does not exist.
Update to check script checksprayd.ksh to redirect errors to /dev/null, in case inetd has been disabled on the system and/or /etc/inetd.conf does not exist.
Update to check script checksystat.ksh to redirect errors to /dev/null, in case inetd has been disabled on the system and/or /etc/inetd.conf does not exist.
Update to check script checktalk.ksh to redirect errors to /dev/null, in case inetd has been disabled on the system and/or /etc/inetd.conf does not exist.
Update to check script checktcpwrappers.ksh to redirect errors to /dev/null, in case inetd has been disabled on the system and/or /etc/inetd.conf does not exist.
Update to check script checktelnet.ksh to redirect errors to /dev/null, in case inetd has been disabled on the system and/or /etc/inetd.conf does not exist.
Update to check script checktftp.ksh to redirect errors to /dev/null, in case inetd has been disabled on the system and/or /etc/inetd.conf does not exist.
Update to check script checktime.ksh to redirect errors to /dev/null, in case inetd has been disabled on the system and/or /etc/inetd.conf does not exist.
Update to check script checkuucp.ksh to redirect errors to /dev/null, in case inetd has been disabled on the system and/or /etc/inetd.conf does not exist.
Update to check script checkwsmserver.ksh to redirect errors to /dev/null, in case inetd has been disabled on the system and/or /etc/inetd.conf does not exist.
Update to check script checkxmquery.ksh to redirect errors to /dev/null, in case inetd has been disabled on the system and/or /etc/inetd.conf does not exist.

Version: 19.11.17

Update to check script checkoslevel.ksh to recoomend Technologoy Level 4 Service Pack 1 for AIX 7.2 and Technology Level 5 Service Pack 5 for AIX 7.1.
Update to check script checkviosioslevel.ksh to recommend upgrading VIOS to version 3.1.1.10.

Version: 19.11.11

Update to check script checketchosts.ksh to recommend using DNS when there are many entries in /etc/hosts.

Version: 19.10.23

Update to check script checkuserprofile.ksh to improve the output of the check script.
Update to check script checkgzip.ksh to correctly determine the version of gzip to be installed on the system.
Update to check script checkemcpowerpathlevel.ksh to improve the output of the check script.
Update to check script checkemcodmlevel.ksh to improve the output of the check script.
Update to check script checkcrontabs.ksh to improve excluding the root user from the list of users to check.
Update to check script checksudoersusers.ksh to exclude netgroups (starting with a plus sign) in /etc/sudoers.

Version: 19.10.22

Update to check script checkjavalevels.ksh to recommend updated levels of Java for Java7, Java7.1 and Java8.
Update to check script checkopenssllevel.ksh to recommend OpenSSL level 1.0.2.1801 (version OpenSSL 1.0.2r).
Update to check script checkopensshlevel.ksh to recommend OpenSSH level 7.5.102.1801.
Update to check script checkemcodmlevel.ksh to recommend version 6.1.1.1 of the EMC AIX ODM Kit.
Update to check script checkwget.ksh to redirect any errors generated by the wget command.
Update to check script checkmailboxowners.ksh to check additionally for user names that are too long to be displayed within the output of ls -als.
Update to check script checkdevperms.ksh to allow alternativer permissions for the /dev folder as well.
New check script checketchostsnohostname.ksh to check for entries in /etc/hosts that only list the IP address, and no hostname.
Update to check script checketchostsvsdns.ksh to avoid hanging the script should an entry in /etc/hosts be present without a hostname.
Update to check script checketchostsdups.ksh to remove any trailing white spaces and tabs from the output.
Update to check script checketchostsfile.ksh to remove any trailing white spaces and tabs from the output.
Update to check script checketchostsequiv.ksh to recommend mode 600 for /etc/hosts.equiv instead of mode 644.

Version: 19.09.18

Update to check script checksystemfirmwarelevel.ksh for new releases of Power8 and Power8 system firmware.

Version: 19.09.16

Update to check script checkpowerhalevel.ksh for newly release fix packs for PowerHA SystemMirror.

Version: 19.09.04

Update to the CHANGES file to correct a typo.

Version: 19.07.25

Update to check script checklostfoundsize.ksh to indicate a warning status when more than 10 MB of data is found in a lost+found folder.

Version: 19.07.23

Update to check script checkoslevel.ksh to recommend newly released Service Packs for AIX 7.1 and AIX 7.2.
Renamed check script checkauditfolder.ksh to checkauditperms.ksh.

Version: 19.07.18

New check script checkpermitemptypasswords.ksh to check if the PermitEmptyPasswords entry in /etc/ssh/sshd_config is either commented out or set to no.
New check script checksshpubkeyauthentication.ksh to check if the PubkeyAuthentication entry in /etc/ssh/sshd_config is either commented out or set to yes.
New check script checksshhostbasedauthentication.ksh to check if the HostBasedAuthentication entry in /etc/ssh/sshd_config is either commented out or set to no.
New check script checksshignorerhosts.ksh to check if the IgnoreRhosts entry in /etc/ssh/sshd_config is either commented out or set to yes.
New check script checksshmaxauthtries.ksh to check if the MaxAuthTries entry in /etc/ssh/sshd_config is either commented out or set within the range 3 to 6.

Version: 19.07.17

Update to check script checktopmemoryusers.ksh to allow it work correctly on AIX 5.3.
Update to check script checklspvu.ksh to allow it work correctly on AIX 5.3.
Update to check script checkxntpd.ksh to correct an issue with a defined variable.
Update to check script checksudoersusers.ksh to allow it work correctly when the system is LDAP enabled.
Update to check script checkmailboxowners.ksh to allow it to work correctly when the system is LDAP enabled.
Update to check script checklssrc.ksh to allow it to work in cases where individual resource controller items are started from /etc/inittab, but a space is missing after -s.
Update to check script checkgidbelow100.ksh to avoid displaying an alert when LDAP authentication is enabled on the system.
Update to check script checketcsecuritypasswdused.ksh to avoid displaying an alert when LDAP authentication is enabled on the system.
Update to check script checkcrout.ksh to display only the first 100 entries found to reduce the length of the output.
Fixed issues with the TOOLBOX file not listing the latest versions of the AIX Toolbox for Linux Applications.
New check script checkcleanetcssh.ksh to check for any files in /etc/ssh that can be cleaned up.
New check script checksshbanner.ksh to check the Banner entry in sshd_config.

Version: 19.07.16

New check script checksplunkinittab.ksh to check if the Splunk forwarder agent inittab entry is present in /etc/inittab, if installed.
New check script checksplunkactive.ksh to check if the Splunk Forwarder agent is active, if installed.
Update to check script checkopenssllevel.ksh to recommend version 1.0.2.1800 of OpenSSL.
Update to check script checkopensshlevel.ksh to recommend version 7.5.102.1800 of OpenSSH, to mitigate security vulnerabilities CVE-2019-6109, CVE-2019-6110, CVE-2019-6111 and CVE-2018-20685.
New check script checkrsyslogforwarding.ksh to check if the rsyslog messages are forwarded to a central logging server.

Version: 19.07.09

Update to check script checkall.ksh to update the message displayed when an individual check script takes too long to run.

Version: 19.06.05

Update to serveral check scripts to redirect the stderr of the lsattr command to /dev/null.

Version: 19.06.05

New check script checkdevurandom.ksh to check if the device /dev/urandom exists.

Version: 19.06.04

Update to check script checkpowerhalevel.ksh for new recommended Service Pack levels for PowerHA 7.2.2 and 7.2.3.

Version: 19.05.23

Update to check script checksystemfirmwarelevel.ksh to recommend newly release Power9 system firmware VL930.

Version: 19.05.22

Update to check script checkpatrollevel.ksh to recommend a new level of the BMC Patrol Agent software.
Update to the description of check script checkpatrolagent.ksh.

Version: 19.05.16

Renamed check script checkemcpowerunlic.ksh to checkemcpowerpathunlicensed.ksh.
Update to check script checkemcpowerpathlevel.ksh to recommend new available PowerPath levels.
Update to check script checkemcinq.ksh to remove a typo in a comment.

Version: 19.05.13

Update to check script checkoslevel.ksh to recommend new Service Packs available for AIX 7.1 TL5 and AIX 7.2 TL3.

Version: 19.04.03

New check script checkvarfilesystem.ksh to check if /var is a separate file system.

Version: 19.04.02

Update of the description of check script checketchostsnonnumeric.ksh to further explain what the non-numeric entries are.

Version: 19.03.26

Update of the package to allow for an RPM build of UNIX Health Check for AIX.

Version: 19.03.25

Update to check script checkjavalevels.ksh to recommend new minimum levels for Java 7, 7.1 and 8, per the latest IBM security advisory.
Update to check script checkoslevel.ksh to recommend newly available Service Packs for AIX 7.2 technology levels.
Update to check script checklosflevel.ksh to recommend version 4.89 of LSOF.
Update to check script checkopenssllevel.ksh to recommend version 1.0.2.1601 of OpenSSL.
Update to check script checkopensshlevel.ksh to recommend version 7.5.102.1600 of OpenSSH.
Update to check script checketcsecuritypasswdused.ksh to avoid reporting an issue on user accounts with no password set (already alerted through another check script).
Update to check script checkpython.ksh to use the TOOLBOX file to determine the latest version.
Update to check script checkcupsactive.ksh to remove a comment.
Update to check script checkcups.ksh to use the TOOLBOX file to determine the latest version.
Update to check script checkgangliagmondlevel.ksh to use the TOOLBOX file to determine the latest version.
Update to check script checkgangliagmetadlevel.ksh to use the TOOLBOX file to determine the latest version.
Update to check script checknmaplevel.ksh to use the TOOLBOX file to determine the latest version.
Update to check script checkzlib.ksh to use the TOOLBOX file to determine the latest version.
Update to check script checkzip.ksh to use the TOOLBOX file to determine the latest version.
Update to check script checkvnc.ksh to use the TOOLBOX file to determine the latest version.
Update to check script checkunzip.ksh to use the TOOLBOX file to determine the latest version.
Update to check script checksudoversion.ksh to use the TOOLBOX file to determine the latest version.
Update to check script checkrsynclevel.ksh to use the TOOLBOX file to determine the latest version.
Update to check script checklibtiff.ksh to use the TOOLBOX file to determine the latest version.
Update to check script checklibpng.ksh to use the TOOLBOX file to determine the latest version.
Update to check script checklibpaper.ksh to use the TOOLBOX file to determine the latest version.
Update to check script checklibjpeg.ksh to use the TOOLBOX file to determine the latest version.
Update to check script checkless.ksh to use the TOOLBOX file to determine the latest version.
Update to check script checkhttpd.ksh to use the TOOLBOX file to determine the latest version.
Update to check script checkgnutar.ksh to use the TOOLBOX file to determine the latest version.
Update to check script checkgmp.ksh to use the TOOLBOX file to determine the latest version.
Update to check script checkgettext.ksh to use the TOOLBOX file to determine the latest version.
Update to check script checkgcccpp.ksh to recommend the updated version for gcc-cpp of 8.1.0 as available in the AIX Toolbox for Linux Applications.
Update to check script checkgcc.ksh to recommend the updated version for gcc of 8.1.0 as available in the AIX Toolbox for Linux Applications.
Update to check script checklibstdc.ksh to recommend the updated version for libstdc++ of 8.1.0 as available in the AIX Toolbox for Linux Applications.
Update to check script checklibgcc.ksh to recommend the updated version for libgcc of 8.1.0 as available in the AIX Toolbox for Linux Applications.
Update to check script checkexpect.ksh to use the TOOLBOX file to determine the latest version.
Update to check script checkenscript.ksh to use the TOOLBOX file to determine the latest version.
Update to check script checkcurl.ksh to use the TOOLBOX file to determine the latest version.
Update to check script checkcurl.ksh to use the TOOLBOX file to determine the latest version.
Update to check script checkcpio.ksh to use the TOOLBOX file to determine the latest version.
Update to check script checkcoreutils.ksh to use the TOOLBOX file to determine the latest version.
Update to check script checkbzip2.ksh to use the TOOLBOX file to determine the latest version.
Update to check script checkbash.ksh to use the TOOLBOX file to determine the latest version.
Update to check script checkwget.ksh to use the TOOLBOX file to determine the latest version.
Inclusion of the TOOLBOX file, which is a complete listing of all the latest RPM packages available in the AIX Toolbox for Linux Applications.
Update to check script checkcompellentshowtimervalue.ksh to redirect errors to stdout instead of file 1, which was a typo.
Update to check script checkrperf.ksh to allow it to work with the regular Korn Shell instead of ksh93.

Version: 19.03.21

New check script checkntpservers.ksh to check if the configured NTP servers can be used for time synchronization.
Update of check script checksystemfirmwarelevel.ksh for newly available system firmware for Power9 systems.

Version: 19.03.11

Addition of the LICENSE file to the package.

Version: 19.01.23

Update to check script checkbusydisk.ksh to improve the output of the check script.

Version: 18.12.22

New check script checkhomedirperms.ksh to check the permissions, owner and group of the home directory of root.
Update to check script checkroothomedir.ksh to exit if the home directory of user root does not exist.

Version: 18.12.14

Update to check script checkdevconsole.ksh to redirect any errors of ls to /dev/null, so no error will be displayed on the screen if /dev/console does not exist.

Version: 18.12.11

Update to check script checkhighcpu.ksh to ensure an error is reported if processes with high CPU usage are detected.

Version: 18.12.10

Update to check script checknfsconfig.ksh to update the description of the check script to provide additional information on how to view both exported and mounted NFS file systems.

Version: 18.12.05

Update to check script checkdnsdomain.ksh to improve the output of the check script.
Removed check script checkdev.ksh, because script checkdevperms.ksh includes the same functionality.

Version: 18.12.04

Renamed check script checkmnt.ksh to checkmntperms.ksh as the script checks the permissions of the /mnt folder.

Version: 18.12.01

Update to check script checkpowerhalevel.ksh to recommend new available Service Packs for PowerHA SystemMirror 7.2.0, 7.2.1 and 7.2.2.
Update to the description of check script checkoratab.ksh to include information about what file /etc/oratab is used for.
Update to the description of check script checkoratabpaths.ksh to include information about what file /etc/oratab is used for.
Update to the description of check script checkauthorizedkeysentries.ksh to include information what the authorized_keys files are used for.
Update to the description of check script checkauthorizedkeysentriesoracle.ksh to include information what the authorized_keys files are used for.
Update to check script checkauthorizedkeysdups.ksh to remove an error in an awk command.
Update to check script checkauthorizedkeysdupsoracle.ksh to remove an error in an awk command.

Version: 18.11.30

Update to check script checkpwd.ksh to improve the output of the script and adjust the description of the check script.
Update to check script checkrhosts.ksh to improve the output of the script.

Version: 18.11.29

Update to check script checkregularfilesinhome.ksh to improve upon the output of the check script.
Renamed check script checksbin.ksh to checksbinperms.ksh, as the script checks the permissions of folder /sbin.

Version: 18.11.27

Update to check script checkoslevel.ksh to update recommended Service Packs for AIX 7.2.
New check script checketcsecuritypasswdperms.ksh to check the permissions of /etc/security/passwd.
New check script checketcsecuritypasswdused.ksh to check if the shadow file /etc/security/passwd is used for storing passwords.
Update to check script checksimpanaactive.ksh to update the purpose description within the check script.
Update to check script checksuodersusers.ksh to improving checking for the existence of user accounts known in the /etc/sudoers file.

Version: 18.11.26

Update to check script checksudovisudopermissions.ksh to remove an unnecessary space.
Update to check script checksudopermissions.ksh to remove an unnecessary space.

Version: 18.11.25

Update to the description of check script checkvnbserver.ksh to correct a typo.

Version: 18.11.23

Update to the description of check script checkcaaservices.ksh to remove an empty line.

Version: 18.11.22

Update to check script checkall.ksh to improve the HTML output of the report - better consistency of the fonts used; better readability on mobile devices; better scaling with Microsoft Outlook.

Version: 18.11.20

Update to check script checkviosioslevel.ksh to recommend version 3.1.0.x of the PowerVM Virtual I/O Server to be installed, and if version 2.2 is used to at least upgrade to version 2.2.6.20
Update to check script checkviosioslevel.ksh to recommend version 3.1.0.x of the PowerVM Virtual I/O Server to be installed, and if version 2.2 is used to at least upgrade to version 2.2.6.

Version: 18.11.19

Update to check script checksystemfirmwarelevel.ksh for updated system system firmware levels for Power8 and Power9 hardware.

Version: 18.11.16

Update to check script checketchosts.ksh to allow a greater number of locally defined entries in /etc/hosts.

Version: 18.11.01

Update to check script checketherchannel.ksh to add some additional lines of output to the script for description purposes.

Version: 18.10.24

Update of the demo version to include the first 100 check scripts of the full version.

Version: 18.10.19

Update to check script checkpgspusagevsmemory.ksh to correct a comment within the script.

Version: 18.10.03

Update to check script checksystemfirmwarelevel.ksh in response to an updated system firmware release by IBM for Power9 systems.
Update to check script checkoslevel.ksh to check for the latest Service Packs for AIX 6.1 TL9, AIX 7.1 TL4, AIX 7.1 TL5, AIX 7.2 TL0, AIX 7.2 TL1, AIX 7.2 TL2 and AIX 7.2 TL3.

Version: 18.10.02

Update to check script checksendmailsmtp.ksh to avoid checking for a DNS entry for the SMTP server, if brackets are used in the DS entry in /etc/sendmail.cf, as using brackets in the DS entry results in sendmail not doing any DNS verification of the SMTP server.

Version: 18.09.20

Update to check script checkjavalevels.ksh to check for the latest Java levels to be installed per the Java July 2018 advisory.

Version: 18.09.18

Update to check script checkrperf.ksh to update it to version 37, as released by IBM in September 2018, which includes rperf values for Power9 Enterprise E950 and E980 systems.

Version: 18.08.22

Update to check script checkall.ksh to include the -t check script time-out option.

Version: 18.07.13

Update to check script checkcompellentdssslevel.ksh to recommend version 3.0.2.5 of the Dell Storage Suite for AIX to be installed, if Dell Compellent storage is used.
Update to check script checklssrc.ksh to provide an improved output, especially if the inittab entry differs from the resource controller entry.
Update to check script checkpowerhalevels.ksh to ignore any entries for fileset cluster.es.smui.server, which can be safely ignored, as it is okay to have this fileset installed on just one of the PowerHA nodes within a cluster.
Update to check script checkpowerhapackages.ksh to ignore any entries for fileset cluster.es.smui.server, which can be safely ignored, as it is okay to have this fileset installed on just one of the PowerHA nodes within a cluster.
New check script checkpowerhasmui.ksh to check if the PowerHA System Management User Interface packages are installed.
Update to check script checkall.ksh to allow check scripts to run for 180 seconds instead of 120 seconds.
Update to check script checklibgcc.ksh to check for the new version of libgcc, version 6.3.0 on AIX 6.1 and AIX 7.1, and version 7.2.0 on AIX 7.2.
Update to check script checklibstdc.ksh to check for the new version of libstdc++, version 6.3.0 on AIX 6.1 and AIX 7.1, and version 7.2.0 on AIX 7.2.
New check script checkgcc.ksh to check if the correct level of gcc RPM is installed.
New check script checkgcccpp.ksh to check if the correct level of gcc-cpp RPM is installed.
New check script checkcpio.ksh to check if the correct level of cpio RPM is installed.
New check script checkexpect.ksh to check if the correct level of expect RPM is installed.

Order

No time to lose? Need to know what's wrong with
your UNIX system now? Then get started TODAY!