Overview of updates - AIX version

Latest available version: 19.12.09

Overview of the most recent updates to UNIX Health Check for AIX:

Version: 19.12.09
  • Update to check script checkcrontabcommandsexec.ksh to avoid reporting an error if a command within a crontab file starts with a non-alphanumeric character.
Version: 19.12.07
  • Update to check script checkopenssllevel.ksh to recommend OpenSSL 1.0.2.2001 (1.0.2t).
  • Update to check script checkopensshlevel.ksh to recommend OpenSSH 7.5.102.2000 (OpenSSH-7.5p1).
Version: 19.11.19
  • Update to check script checknobodygroup.ksh to not report an error if user lpd is not a member of the group nobody.
  • Update to check script checkecho.ksh to redirect errors to /dev/null, in case inetd has been disabled on the system and/or /etc/inetd.conf does not exist.
  • Update to check script checkinetdconffile.ksh to redirect errors to /dev/null, in case inetd has been disabled on the system and/or /etc/inetd.conf does not exist.
  • Update to check script checkinetdcommands.ksh to redirect errors to /dev/null, in case inetd has been disabled on the system and/or /etc/inetd.conf does not exist.
  • Update to check script checkinetdcommandsexec.ksh to redirect errors to /dev/null, in case inetd has been disabled on the system and/or /etc/inetd.conf does not exist.
  • Update to check script checkinetdactive.ksh to redirect errors to /dev/null, in case inetd has been disabled on the system and/or /etc/inetd.conf does not exist.
  • Update to check script checkftpusers.ksh to redirect errors to /dev/null, in case inetd has been disabled on the system and/or /etc/inetd.conf does not exist.
  • Update to check script checkftplogging.ksh to redirect errors to /dev/null, in case inetd has been disabled on the system and/or /etc/inetd.conf does not exist.
  • Update to check script checkftpd.ksh to redirect errors to /dev/null, in case inetd has been disabled on the system and/or /etc/inetd.conf does not exist.
  • Update to check script checkfinger.ksh to redirect errors to /dev/null, in case inetd has been disabled on the system and/or /etc/inetd.conf does not exist.
  • Update to check script checkexec.ksh to redirect errors to /dev/null, in case inetd has been disabled on the system and/or /etc/inetd.conf does not exist.
  • Update to check script checkdiscard.ksh to redirect errors to /dev/null, in case inetd has been disabled on the system and/or /etc/inetd.conf does not exist.
  • Update to check script checkcomsat.ksh to redirect errors to /dev/null, in case inetd has been disabled on the system and/or /etc/inetd.conf does not exist.
  • Update to check script checkdaytime.ksh to redirect errors to /dev/null, in case inetd has been disabled on the system and/or /etc/inetd.conf does not exist.
Version: 19.11.18
  • Update to check script checkblankpassword.ksh to redirect errors to /dev/null, in case inetd has been disabled on the system and/or /etc/inetd.conf does not exist.
  • Update to check script checkbootps.ksh to redirect errors to /dev/null, in case inetd has been disabled on the system and/or /etc/inetd.conf does not exist.
  • Update to check script checkbgssd.ksh to redirect errors to /dev/null, in case inetd has been disabled on the system and/or /etc/inetd.conf does not exist.
  • Update to check script checkcaainetdconf.ksh to redirect errors to /dev/null, in case inetd has been disabled on the system and/or /etc/inetd.conf does not exist.
  • Update to check script checkcdeservices.ksh to redirect errors to /dev/null, in case inetd has been disabled on the system and/or /etc/inetd.conf does not exist.
  • Update to check script checkchargen.ksh to redirect errors to /dev/null, in case inetd has been disabled on the system and/or /etc/inetd.conf does not exist.
  • Update to check script checkftproot.ksh to redirect errors to /dev/null, in case inetd has been disabled on the system and/or /etc/inetd.conf does not exist.
  • Update to check script checkimap2.ksh to redirect errors to /dev/null, in case inetd has been disabled on the system and/or /etc/inetd.conf does not exist.
  • Update to check script checkinetdconf.ksh to redirect errors to /dev/null, in case inetd has been disabled on the system and/or /etc/inetd.conf does not exist.
  • Update to check script checkinetdconfcomments.ksh to redirect errors to /dev/null, in case inetd has been disabled on the system and/or /etc/inetd.conf does not exist.
  • Update to check script checkinetdactive.ksh to redirect errors to /dev/null, in case inetd has been disabled on the system and/or /etc/inetd.conf does not exist.
  • Update to check script checkinstsrv.ksh to redirect errors to /dev/null, in case inetd has been disabled on the system and/or /etc/inetd.conf does not exist.
  • Update to check script checkkrlogind.ksh to redirect errors to /dev/null, in case inetd has been disabled on the system and/or /etc/inetd.conf does not exist.
  • Update to check script checkkshell.ksh to redirect errors to /dev/null, in case inetd has been disabled on the system and/or /etc/inetd.conf does not exist.
  • Update to check script checknetstatinetd.ksh to redirect errors to /dev/null, in case inetd has been disabled on the system and/or /etc/inetd.conf does not exist.
  • Update to check script checkntalk.ksh to redirect errors to /dev/null, in case inetd has been disabled on the system and/or /etc/inetd.conf does not exist.
  • Update to check script checkpcnfsd.ksh to redirect errors to /dev/null, in case inetd has been disabled on the system and/or /etc/inetd.conf does not exist.
  • Update to check script checkrexd.ksh to redirect errors to /dev/null, in case inetd has been disabled on the system and/or /etc/inetd.conf does not exist.
  • Update to check script checkrlogin.ksh to redirect errors to /dev/null, in case inetd has been disabled on the system and/or /etc/inetd.conf does not exist.
  • Update to check script checkrootrsh.ksh to redirect errors to /dev/null, in case inetd has been disabled on the system and/or /etc/inetd.conf does not exist.
  • Update to check script checkrquotad.ksh to redirect errors to /dev/null, in case inetd has been disabled on the system and/or /etc/inetd.conf does not exist.
  • Update to check script checkrshd.ksh to redirect errors to /dev/null, in case inetd has been disabled on the system and/or /etc/inetd.conf does not exist.
  • Update to check script checkrstatd.ksh to redirect errors to /dev/null, in case inetd has been disabled on the system and/or /etc/inetd.conf does not exist.
  • Update to check script checkrusersd.ksh to redirect errors to /dev/null, in case inetd has been disabled on the system and/or /etc/inetd.conf does not exist.
  • Update to check script checkrwalld.ksh to redirect errors to /dev/null, in case inetd has been disabled on the system and/or /etc/inetd.conf does not exist.
  • Update to check script checksprayd.ksh to redirect errors to /dev/null, in case inetd has been disabled on the system and/or /etc/inetd.conf does not exist.
  • Update to check script checksystat.ksh to redirect errors to /dev/null, in case inetd has been disabled on the system and/or /etc/inetd.conf does not exist.
  • Update to check script checktalk.ksh to redirect errors to /dev/null, in case inetd has been disabled on the system and/or /etc/inetd.conf does not exist.
  • Update to check script checktcpwrappers.ksh to redirect errors to /dev/null, in case inetd has been disabled on the system and/or /etc/inetd.conf does not exist.
  • Update to check script checktelnet.ksh to redirect errors to /dev/null, in case inetd has been disabled on the system and/or /etc/inetd.conf does not exist.
  • Update to check script checktftp.ksh to redirect errors to /dev/null, in case inetd has been disabled on the system and/or /etc/inetd.conf does not exist.
  • Update to check script checktime.ksh to redirect errors to /dev/null, in case inetd has been disabled on the system and/or /etc/inetd.conf does not exist.
  • Update to check script checkuucp.ksh to redirect errors to /dev/null, in case inetd has been disabled on the system and/or /etc/inetd.conf does not exist.
  • Update to check script checkwsmserver.ksh to redirect errors to /dev/null, in case inetd has been disabled on the system and/or /etc/inetd.conf does not exist.
  • Update to check script checkxmquery.ksh to redirect errors to /dev/null, in case inetd has been disabled on the system and/or /etc/inetd.conf does not exist.
Version: 19.11.17
  • Update to check script checkoslevel.ksh to recoomend Technologoy Level 4 Service Pack 1 for AIX 7.2 and Technology Level 5 Service Pack 5 for AIX 7.1.
  • Update to check script checkviosioslevel.ksh to recommend upgrading VIOS to version 3.1.1.10.
Version: 19.11.11
  • Update to check script checketchosts.ksh to recommend using DNS when there are many entries in /etc/hosts.
Version: 19.10.23
  • Update to check script checkuserprofile.ksh to improve the output of the check script.
  • Update to check script checkgzip.ksh to correctly determine the version of gzip to be installed on the system.
  • Update to check script checkemcpowerpathlevel.ksh to improve the output of the check script.
  • Update to check script checkemcodmlevel.ksh to improve the output of the check script.
  • Update to check script checkcrontabs.ksh to improve excluding the root user from the list of users to check.
  • Update to check script checksudoersusers.ksh to exclude netgroups (starting with a plus sign) in /etc/sudoers.
Version: 19.10.22
  • Update to check script checkjavalevels.ksh to recommend updated levels of Java for Java7, Java7.1 and Java8.
  • Update to check script checkopenssllevel.ksh to recommend OpenSSL level 1.0.2.1801 (version OpenSSL 1.0.2r).
  • Update to check script checkopensshlevel.ksh to recommend OpenSSH level 7.5.102.1801.
  • Update to check script checkemcodmlevel.ksh to recommend version 6.1.1.1 of the EMC AIX ODM Kit.
  • Update to check script checkwget.ksh to redirect any errors generated by the wget command.
  • Update to check script checkmailboxowners.ksh to check additionally for user names that are too long to be displayed within the output of ls -als.
  • Update to check script checkdevperms.ksh to allow alternativer permissions for the /dev folder as well.
  • New check script checketchostsnohostname.ksh to check for entries in /etc/hosts that only list the IP address, and no hostname.
  • Update to check script checketchostsvsdns.ksh to avoid hanging the script should an entry in /etc/hosts be present without a hostname.
  • Update to check script checketchostsdups.ksh to remove any trailing white spaces and tabs from the output.
  • Update to check script checketchostsfile.ksh to remove any trailing white spaces and tabs from the output.
  • Update to check script checketchostsequiv.ksh to recommend mode 600 for /etc/hosts.equiv instead of mode 644.
Version: 19.09.18
  • Update to check script checksystemfirmwarelevel.ksh for new releases of Power8 and Power8 system firmware.
Version: 19.09.16
  • Update to check script checkpowerhalevel.ksh for newly release fix packs for PowerHA SystemMirror.
Version: 19.09.04
  • Update to the CHANGES file to correct a typo.
Version: 19.07.25
  • Update to check script checklostfoundsize.ksh to indicate a warning status when more than 10 MB of data is found in a lost+found folder.
Version: 19.07.23
  • Update to check script checkoslevel.ksh to recommend newly released service packs for AIX 7.1 and AIX 7.2.
  • Renamed check script checkauditfolder.ksh to checkauditperms.ksh.
Version: 19.07.18
  • New check script checkpermitemptypasswords.ksh to check if the PermitEmptyPasswords entry in /etc/ssh/sshd_config is either commented out or set to no.
  • New check script checksshpubkeyauthentication.ksh to check if the PubkeyAuthentication entry in /etc/ssh/sshd_config is either commented out or set to yes.
  • New check script checksshhostbasedauthentication.ksh to check if the HostBasedAuthentication entry in /etc/ssh/sshd_config is either commented out or set to no.
  • New check script checksshignorerhosts.ksh to check if the IgnoreRhosts entry in /etc/ssh/sshd_config is either commented out or set to yes.
  • New check script checksshmaxauthtries.ksh to check if the MaxAuthTries entry in /etc/ssh/sshd_config is either commented out or set within the range 3 to 6.
Version: 19.07.17
  • Update to check script checktopmemoryusers.ksh to allow it work correctly on AIX 5.3.
  • Update to check script checklspvu.ksh to allow it work correctly on AIX 5.3.
  • Update to check script checkxntpd.ksh to correct an issue with a defined variable.
  • Update to check script checksudoersusers.ksh to allow it work correctly when the system is LDAP enabled.
  • Update to check script checkmailboxowners.ksh to allow it to work correctly when the system is LDAP enabled.
  • Update to check script checklssrc.ksh to allow it to work in cases where individual resource controller items are started from /etc/inittab, but a space is missing after -s.
  • Update to check script checkgidbelow100.ksh to avoid displaying an alert when LDAP authentication is enabled on the system.
  • Update to check script checketcsecuritypasswdused.ksh to avoid displaying an alert when LDAP authentication is enabled on the system.
  • Update to check script checkcrout.ksh to display only the first 100 entries found to reduce the length of the output.
  • Fixed issues with the TOOLBOX file not listing the latest versions of the AIX Toolbox for Linux Applications.
  • New check script checkcleanetcssh.ksh to check for any files in /etc/ssh that can be cleaned up.
  • New check script checksshbanner.ksh to check the Banner entry in sshd_config.
Version: 19.07.16
  • New check script checksplunkinittab.ksh to check if the Splunk forwarder agent inittab entry is present in /etc/inittab, if installed.
  • New check script checksplunkactive.ksh to check if the Splunk Forwarder agent is active, if installed.
  • Update to check script checkopenssllevel.ksh to recommend version 1.0.2.1800 of OpenSSL.
  • Update to check script checkopensshlevel.ksh to recommend version 7.5.102.1800 of OpenSSH, to mitigate security vulnerabilities CVE-2019-6109, CVE-2019-6110, CVE-2019-6111 and CVE-2018-20685.
  • New check script checkrsyslogforwarding.ksh to check if the rsyslog messages are forwarded to a central logging server.
Version: 19.07.09
  • Update to check script checkall.ksh to update the message displayed when an individual check script takes too long to run.
Version: 19.06.05
  • Update to serveral check scripts to redirect the stderr of the lsattr command to /dev/null.
Version: 19.06.05
  • New check script checkdevurandom.ksh to check if the device /dev/urandom exists.
Version: 19.06.04
  • Update to check script checkpowerhalevel.ksh for new recommended service pack levels for PowerHA 7.2.2 and 7.2.3.
Version: 19.05.23
  • Update to check script checksystemfirmwarelevel.ksh to recommend newly release Power9 system firmware VL930.
Version: 19.05.22
  • Update to check script checkpatrollevel.ksh to recommend a new level of the BMC Patrol Agent software.
  • Update to the description of check script checkpatrolagent.ksh.
Version: 19.05.16
  • Renamed check script checkemcpowerunlic.ksh to checkemcpowerpathunlicensed.ksh.
  • Update to check script checkemcpowerpathlevel.ksh to recommend new available PowerPath levels.
  • Update to check script checkemcinq.ksh to remove a typo in a comment.
Version: 19.05.13
  • Update to check script checkoslevel.ksh to recommend new service packs available for AIX 7.1 TL5 and AIX 7.2 TL3.
Version: 19.04.03
  • New check script checkvarfilesystem.ksh to check if /var is a separate file system.
Version: 19.04.02
  • Update of the description of check script checketchostsnonnumeric.ksh to further explain what the non-numeric entries are.
Version: 19.03.26
  • Update of the package to allow for an RPM build of UNIX Health Check for AIX.
Version: 19.03.25
  • Update to check script checkjavalevels.ksh to recommend new minimum levels for Java 7, 7.1 and 8, per the latest IBM security advisory.
  • Update to check script checkoslevel.ksh to recommend newly available service packs for AIX 7.2 technology levels.
  • Update to check script checklosflevel.ksh to recommend version 4.89 of LSOF.
  • Update to check script checkopenssllevel.ksh to recommend version 1.0.2.1601 of OpenSSL.
  • Update to check script checkopensshlevel.ksh to recommend version 7.5.102.1600 of OpenSSH.
  • Update to check script checketcsecuritypasswdused.ksh to avoid reporting an issue on user accounts with no password set (already alerted through another check script).
  • Update to check script checkpython.ksh to use the TOOLBOX file to determine the latest version.
  • Update to check script checkcupsactive.ksh to remove a comment.
  • Update to check script checkcups.ksh to use the TOOLBOX file to determine the latest version.
  • Update to check script checkgangliagmondlevel.ksh to use the TOOLBOX file to determine the latest version.
  • Update to check script checkgangliagmetadlevel.ksh to use the TOOLBOX file to determine the latest version.
  • Update to check script checknmaplevel.ksh to use the TOOLBOX file to determine the latest version.
  • Update to check script checkzlib.ksh to use the TOOLBOX file to determine the latest version.
  • Update to check script checkzip.ksh to use the TOOLBOX file to determine the latest version.
  • Update to check script checkvnc.ksh to use the TOOLBOX file to determine the latest version.
  • Update to check script checkunzip.ksh to use the TOOLBOX file to determine the latest version.
  • Update to check script checksudoversion.ksh to use the TOOLBOX file to determine the latest version.
  • Update to check script checkrsynclevel.ksh to use the TOOLBOX file to determine the latest version.
  • Update to check script checklibtiff.ksh to use the TOOLBOX file to determine the latest version.
  • Update to check script checklibpng.ksh to use the TOOLBOX file to determine the latest version.
  • Update to check script checklibpaper.ksh to use the TOOLBOX file to determine the latest version.
  • Update to check script checklibjpeg.ksh to use the TOOLBOX file to determine the latest version.
  • Update to check script checkless.ksh to use the TOOLBOX file to determine the latest version.
  • Update to check script checkhttpd.ksh to use the TOOLBOX file to determine the latest version.
  • Update to check script checkgnutar.ksh to use the TOOLBOX file to determine the latest version.
  • Update to check script checkgmp.ksh to use the TOOLBOX file to determine the latest version.
  • Update to check script checkgettext.ksh to use the TOOLBOX file to determine the latest version.
  • Update to check script checkgcccpp.ksh to recommend the updated version for gcc-cpp of 8.1.0 as available in the AIX Toolbox for Linux Applications.
  • Update to check script checkgcc.ksh to recommend the updated version for gcc of 8.1.0 as available in the AIX Toolbox for Linux Applications.
  • Update to check script checklibstdc.ksh to recommend the updated version for libstdc++ of 8.1.0 as available in the AIX Toolbox for Linux Applications.
  • Update to check script checklibgcc.ksh to recommend the updated version for libgcc of 8.1.0 as available in the AIX Toolbox for Linux Applications.
  • Update to check script checkexpect.ksh to use the TOOLBOX file to determine the latest version.
  • Update to check script checkenscript.ksh to use the TOOLBOX file to determine the latest version.
  • Update to check script checkcurl.ksh to use the TOOLBOX file to determine the latest version.
  • Update to check script checkcurl.ksh to use the TOOLBOX file to determine the latest version.
  • Update to check script checkcpio.ksh to use the TOOLBOX file to determine the latest version.
  • Update to check script checkcoreutils.ksh to use the TOOLBOX file to determine the latest version.
  • Update to check script checkbzip2.ksh to use the TOOLBOX file to determine the latest version.
  • Update to check script checkbash.ksh to use the TOOLBOX file to determine the latest version.
  • Update to check script checkwget.ksh to use the TOOLBOX file to determine the latest version.
  • Inclusion of the TOOLBOX file, which is a complete listing of all the latest RPM packages available in the AIX Toolbox for Linux Applications.
  • Update to check script checkcompellentshowtimervalue.ksh to redirect errors to stdout instead of file 1, which was a typo.
  • Update to check script checkrperf.ksh to allow it to work with the regular Korn Shell instead of ksh93.
Version: 19.03.21
  • New check script checkntpservers.ksh to check if the configured NTP servers can be used for time synchronization.
  • Update of check script checksystemfirmwarelevel.ksh for newly available system firmware for Power9 systems.
Version: 19.03.11
  • Addition of the LICENSE file to the package.
Version: 19.01.23
  • Update to check script checkbusydisk.ksh to improve the output of the check script.
Version: 19.01.02
  • Copyright update of the UNIX Health Check for AIX package from 2018 to 2019.
Version: 18.12.22
  • New check script checkhomedirperms.ksh to check the permissions, owner and group of the home directory of root.
  • Update to check script checkroothomedir.ksh to exit if the home directory of user root does not exist.
Version: 18.12.14
  • Update to check script checkdevconsole.ksh to redirect any errors of ls to /dev/null, so no error will be displayed on the screen if /dev/console does not exist.
Version: 18.12.11
  • Update to check script checkhighcpu.ksh to ensure an error is reported if processes with high CPU usage are detected.
Version: 18.12.10
  • Update to check script checknfsconfig.ksh to update the description of the check script to provide additional information on how to view both exported and mounted NFS file systems.
Version: 18.12.05
  • Update to check script checkdnsdomain.ksh to improve the output of the check script.
  • Removed check script checkdev.ksh, because script checkdevperms.ksh includes the same functionality.
Version: 18.12.04
  • Renamed check script checkmnt.ksh to checkmntperms.ksh as the script checks the permissions of the /mnt folder.
Version: 18.12.01
  • Update to check script checkpowerhalevel.ksh to recommend new available service packs for PowerHA SystemMirror 7.2.0, 7.2.1 and 7.2.2.
  • Update to the description of check script checkoratab.ksh to include information about what file /etc/oratab is used for.
  • Update to the description of check script checkoratabpaths.ksh to include information about what file /etc/oratab is used for.
  • Update to the description of check script checkauthorizedkeysentries.ksh to include information what the authorized_keys files are used for.
  • Update to the description of check script checkauthorizedkeysentriesoracle.ksh to include information what the authorized_keys files are used for.
  • Update to check script checkauthorizedkeysdups.ksh to remove an error in an awk command.
  • Update to check script checkauthorizedkeysdupsoracle.ksh to remove an error in an awk command.
Version: 18.11.30
  • Update to check script checkpwd.ksh to improve the output of the script and adjust the description of the check script.
  • Update to check script checkrhosts.ksh to improve the output of the script.
Version: 18.11.29
  • Update to check script checkregularfilesinhome.ksh to improve upon the output of the check script.
  • Renamed check script checksbin.ksh to checksbinperms.ksh, as the script checks the permissions of folder /sbin.
Version: 18.11.27
  • Update to check script checkoslevel.ksh to update recommended service packs for AIX 7.2.
  • New check script checketcsecuritypasswdperms.ksh to check the permissions of /etc/security/passwd.
  • New check script checketcsecuritypasswdused.ksh to check if the shadow file /etc/security/passwd is used for storing passwords.
  • Update to check script checksimpanaactive.ksh to update the purpose description within the check script.
  • Update to check script checksuodersusers.ksh to improving checking for the existence of user accounts known in the /etc/sudoers file.
Version: 18.11.26
  • Update to check script checksudovisudopermissions.ksh to remove an unnecessary space.
  • Update to check script checksudopermissions.ksh to remove an unnecessary space.
Version: 18.11.25
  • Update to the description of check script checkvnbserver.ksh to correct a typo.
Version: 18.11.23
  • Update to the description of check script checkcaaservices.ksh to remove an empty line.
Version: 18.11.22
  • Update to check script checkall.ksh to improve the HTML output of the report - better consistency of the fonts used; better readability on mobile devices; better scaling with Microsoft Outlook.
Version: 18.11.20
  • Update to check script checkviosioslevel.ksh to recommend version 3.1.0.x of the PowerVM Virtual I/O Server to be installed, and if version 2.2 is used to at least upgrade to version 2.2.6.20
  • Update to check script checkviosioslevel.ksh to recommend version 3.1.0.x of the PowerVM Virtual I/O Server to be installed, and if version 2.2 is used to at least upgrade to version 2.2.6.
Version: 18.11.19
  • Update to check script checksystemfirmwarelevel.ksh for updated system system firmware levels for Power8 and Power9 hardware.
Version: 18.11.16
  • Update to check script checketchosts.ksh to allow a greater number of locally defined entries in /etc/hosts.
Version: 18.11.01
  • Update to check script checketherchannel.ksh to add some additional lines of output to the script for description purposes.
Version: 18.10.24
  • Update of the demo version to include the first 100 check scripts of the full version.
Version: 18.10.19
  • Update to check script checkpgspusagevsmemory.ksh to correct a comment within the script.
Version: 18.10.03
  • Update to check script checksystemfirmwarelevel.ksh in response to an updated system firmware release by IBM for Power9 systems.
  • Update to check script checkoslevel.ksh to check for the latest service packs for AIX 6.1 TL9, AIX 7.1 TL4, AIX 7.1 TL5, AIX 7.2 TL0, AIX 7.2 TL1, AIX 7.2 TL2 and AIX 7.2 TL3.
Version: 18.10.02
  • Update to check script checksendmailsmtp.ksh to avoid checking for a DNS entry for the SMTP server, if brackets are used in the DS entry in /etc/sendmail.cf, as using brackets in the DS entry results in sendmail not doing any DNS verification of the SMTP server.
Version: 18.09.20
  • Update to check script checkjavalevels.ksh to check for the latest Java levels to be installed per the Java July 2018 advisory.
Version: 18.09.18
  • Update to check script checkrperf.ksh to update it to version 37, as released by IBM in September 2018, which includes rperf values for Power9 Enterprise E950 and E980 systems.
Version: 18.08.22
  • Update to check script checkall.ksh to include the -t check script time-out option.
Version: 18.07.13
  • Update to check script checkcompellentdssslevel.ksh to recommend version 3.0.2.5 of the Dell Storage Suite for AIX to be installed, if Dell Compellent storage is used.
  • Update to check script checklssrc.ksh to provide an improved output, especially if the inittab entry differs from the resource controller entry.
  • Update to check script checkpowerhalevels.ksh to ignore any entries for fileset cluster.es.smui.server, which can be safely ignored, as it is okay to have this fileset installed on just one of the PowerHA nodes within a cluster.
  • Update to check script checkpowerhapackages.ksh to ignore any entries for fileset cluster.es.smui.server, which can be safely ignored, as it is okay to have this fileset installed on just one of the PowerHA nodes within a cluster.
  • New check script checkpowerhasmui.ksh to check if the PowerHA System Management User Interface packages are installed.
  • Update to check script checkall.ksh to allow check scripts to run for 180 seconds instead of 120 seconds.
  • Update to check script checklibgcc.ksh to check for the new version of libgcc, version 6.3.0 on AIX 6.1 and AIX 7.1, and version 7.2.0 on AIX 7.2.
  • Update to check script checklibstdc.ksh to check for the new version of libstdc++, version 6.3.0 on AIX 6.1 and AIX 7.1, and version 7.2.0 on AIX 7.2.
  • New check script checkgcc.ksh to check if the correct level of gcc RPM is installed.
  • New check script checkgcccpp.ksh to check if the correct level of gcc-cpp RPM is installed.
  • New check script checkcpio.ksh to check if the correct level of cpio RPM is installed.
  • New check script checkexpect.ksh to check if the correct level of expect RPM is installed.
Version: 18.07.11
  • Update to check script checkpowerhalevel.ksh to mark version 7.1.3 as out of support by IBM.
Version: 18.07.10
  • Update to check script checkpowerhanetmoncf.ksh to check both the old and new type entries in netmon.cf if PowerHA 7 or up is used.
  • Update to check script checkpowerhanetmoncf.ksh to check that also VLAN type adapters are considered as a virtual type of adapter.
Version: 18.07.09
  • Update to check script checkrperf.ksh to update it to version 36, as released by IBM, which includes rperf values for Power9 systems.
Version: 18.07.06
  • Update to check script checkzombies.ksh to improve the output.
Version: 18.07.05
  • Update to check script checkjavalevels.ksh to recommend the latest available levels for IBM AIX Developer Kit and Runtine, Java Technology Edition.
Version: 18.07.03
  • Update to check script checkopenssllevel.ksh to recommend a new level of OpenSSL, version 1.0.2.1500 (1.0.2o).
  • Update to check script checkopensshlevel.ksh to recommend a new level of OpenSSH, version 7.5.102.1500.
Version: 18.07.02
  • Update to check script checkpowerhalevel.ksh to recommend a new service pack (SP1) for PowerHA version 7.2.2.
Version: 18.05.30
  • Update to check script checksystemfirmwarelevel.ksh to recommend a newly available firmware level for Power7 and Power9 hardware, in response to CVE-2018-3639, the Speculative Store Bypass vulnearbility.
Version: 18.05.28
  • New check script checksnmpdconfperms.ksh to check the permissions of the SNMP configuration files.
  • Update to check script checksnmp.ksh to improve reporting on SNMP public community name information.
  • Update to check script checksystemfirmwarelevel.ksh to recommend new available system firmware levels for Power7 and Power8 systems, to address Speculative Store Bypass vulnerabilities.
Version: 18.05.27
  • Update to check script checkrperf.ksh to add missing Power8 system 8284-22A_30.
  • New check script checksambatestparm.ksh to run Samba's testparm utility to check the correctness of the the Samba configuration file.
  • Update to check script checkbash64.ksh to avoid reporting an error if bash_64 is not installed.
  • Update to check script checkenscript.ksh to avoid reporting an error if enscript is not installed.
  • Update to check script checkghostscript.ksh to avoid reporting an error if enscript is not installed.
  • Update to check script checksanpvid.ksh to avoid reporting an error on fileset cluster.es.server.rte, if not installed.
  • Update to check script checkunzip.ksh to avoid reporting an error if unzip is not installed.
  • Update to check script checkwget.ksh to avoid reporting an error if wget is not installed.
  • Update to check script checkzip.ksh to avoid reporting an error if zip is not installed.
  • Update to check script checkbootlist.ksh to avoid reporting an error if a network interface entry is listed in the bootlist.
  • Update to check script checkvartmp.ksh to only list the first 100 files found in /var/tmp, instead of the entire listing.
Version: 18.05.14
  • Update to check script checkpowerhalevel.ksh to recommend new PowerHA service packs available for PowerHA versions 7.1.3, 7.2.0 and 7.2.1.
Version: 18.05.07
  • Update to check script checksystemfirmwarelevel.ksh to recommend a newly available firmware level for Power8 hardware, in response to CVE-2018-3639, the Speculative Store Bypass vulnearbility.
Version: 18.05.02
  • Update to check script checkall.ksh to add the model types of the new Power9 systems released by IBM.
  • Update to check script checkhardwaresupport.ksh to add the necessary code for Power9 hardware support.
  • Update to check script checkpowervsaix.ksh to check the required AIX and VIOS levels for Power9 hardware.
  • Update to check script checksystemfirmwarelevel.ksh to check for the Power9 recommended system firmware level.
Version: 18.04.25
  • Update to the description of check script checkshowmount.ksh to add information on the use of the showmount and netstat commands.
Version: 18.04.10
  • Update of check script checkresolvconf.ksh to include testing the time it takes to perform a nslookup command.
Version: 18.04.09
  • Update to check script checkcrontabcommands.ksh to properly check for any crontab commands located in /tmp.
  • Update to the description of check script checkcrontabs.ksh to explain where the crontab files are stored.
Version: 18.04.08
  • New check script checkdevperms.ksh to check the permissions, owner and group of /dev.
  • New check script checkatallowperms.ksh to check the permissions of file /var/adm/cron/at.allow.
  • New check script checkatdenyperms.ksh to check the permissions of file /var/adm/cron/at.deny.
  • New check script checkcronallowperms.ksh to check the permissions of file /var/adm/cron/cron.allow.
  • New check script checkcrondeny.ksh to check the permissions of file /var/adm/cron/cron.deny.
  • New check script checkcronqueuedefs.ksh to check the permissions of file /var/adm/cron/queuedefs.
Version: 18.04.03
  • Update to the description of check script checksudosh.ksh to improve the description.
Version: 18.04.02
  • Update to check script checksshd.ksh to alert with an error is user sshd is not a member of group sshd.
Version: 18.03.30
  • New check script checkexpireduseraccounts.ksh to list any user accounts that have expired.
  • Update to check script checkgecos.ksh to avoid checking user account nuucp as well.
  • Update to the description of check script checkhomedirs.ksh.
Version: 18.03.27
  • Update to check script checkoslevel.ksh to recommend new service packs for AIX 6.1, AIX 7.1 and AIX 7.2.
Version: 18.03.26
  • Update to check script checksuid.ksh to exclude mmfs (GPFS/Spectrum Scale) type file systems from checking.
  • Update to check script checkcoredumps.ksh to exclude mmfs (GPFS/Spectrum Scale) type file systems from checking.
  • Update to check script checkdevicefilesoutsidedev.ksh to exclude mmfs (GPFS/Spectrum Scale) type file systems from checking.
  • Update to check script checkdirsworldwriteable.ksh to exclude mmfs (GPFS/Spectrum Scale) type file systems from checking.
  • Update to check script checkdsmerrorlog.ksh to exclude mmfs (GPFS/Spectrum Scale) type file systems from checking.
  • Update to check script checkfsdirwrite.ksh to exclude mmfs (GPFS/Spectrum Scale) type file systems from checking.
  • Update to check script checkfswrite.ksh to exclude mmfs (GPFS/Spectrum Scale) type file systems from checking.
  • Update to check script checkjfs2.ksh to exclude mmfs (GPFS/Spectrum Scale) type file systems from checking.
  • Update to check script checkmanualfs.ksh to exclude mmfs (GPFS/Spectrum Scale) type file systems from checking.
  • Update to check script checkmissingowners.ksh to exclude mmfs (GPFS/Spectrum Scale) type file systems from checking.
  • Update to check script checknoatime.ksh to exclude mmfs (GPFS/Spectrum Scale) type file systems from checking.
  • Update to check script checkossvfs.ksh to exclude mmfs (GPFS/Spectrum Scale) type file systems from checking.
  • Update to check script checkossvfsnb.ksh to exclude mmfs (GPFS/Spectrum Scale) type file systems from checking.
Version: 18.03.09
  • Update to check script checksystemfirmwarelevel.ksh to recommended newly released system firmware levels for Power7 and Power7+ systems.
Version: 18.03.06
  • New check script checkvlans.ksh to display the configuration of the VLANs on the server, if any.
  • Update to check script checketherchannelip.ksh to allow it to work properly if the IP address has been configured on a VLAN adapter that sits on top of an EtherChannel device.
  • Update to check script checknmapportscan.ksh to add a --host-timeout option to the nmap command to avoid running for a long time.
  • Update to check script checkall.ksh to add a warning to the logfile output if a check script takes longer than 120 seconds to complete.
Version: 18.03.01
  • Update to new computing environment.
Version: 18.02.22
  • New check script checketcresolvconf.ksh to display the contents of /etc/resolv.conf.
Version: 18.02.12
  • New check script checkspectremeltdown.ksh to check if the system has been properly patched for the Spectre and Meltdown vulnerabilities.
  • Update to check script checkviosioslevel.ksh to provide new recommendations on the installed PowerVM Virtual I/O Server (VIOS) level.
Version: 18.02.08
  • Update to check script checksystemfirmwarelevel.ksh to check for newly release Power7 and Power7+ system firmware levels to address the Meltdown and Spectre security vulnerabilities.
  • Update to check script checkftpusers.ksh to not alert if ftp is not enabled in /etc/inetd.conf.
Version: 18.02.07
  • Update to check script checkpowerhalevel.ksh to provide new recommendations for updated service pack levels for PowerHA version 7.
Version: 18.02.06
  • Update to the description of check script checkpowerhadiskattributes.ksh to provide information on how to update the attributes of a disk device when the device is in use.
Version: 18.02.05
  • New check script checkpowerhadiskattributes.ksh to check if the disk attributes on both nodes of a PowerHA/HACMP cluster are set the same.
  • New check script checkhardwaresupport.ksh to check the hardware support status.
  • New check script checkhcheckmodealigned.ksh to check if the hcheck_mode attribute of any disk has been set to the same value for all disks of the same type.
  • New check script checkalgorithmaligned.ksh to check if the algorithm attribute of any disk has been set to the same value for all disks of the same type.
  • New check script checkresrvepolicyaligned.ksh to check if the reserve_policy attribute of any disk has been set to the same value for all disks of the same type.
Version: 18.02.02
  • New check script checkhcheckintervalaligned.ksh to check if the hcheck_interval attribute of any disk has been set to the same value for all disks of the same type.
  • Update to check script checkmaxtransferaligned.ksh to improve the output of the check script and indicate any different max_transfer attributes, if any.
  • Update to check script checkqueuedepthaligned.ksh to improve the output of the check script and indicate any different queue_depth attributes, if any.
Version: 18.02.01
  • New check script checkmaxtransferaligned.ksh to check if the max_transfer disk attribute is aligned for all disks of the same type.
Version: 18.01.26
  • Calculate MD5 has of UNIX Health Check for AIX pacakage automatically.
  • Update to check script checkoslevel.ksh to account for newly available service packs.
Version: 18.01.15
  • Update to check script checksystemfirmwarelevel.ksh for recommended system firmware updates, to mitigate the Spectre and Meltdown threats.
  • Update to check script checkrperf.ksh to update it to version 34, which corrects a printf statement.
Version: 18.01.02
  • Update to check script checkoslevel.ksh to check for updated technlogoy levels for AIX 7.1 (TL5) and AIX 7.2 (TL2).
  • Update to check script checkopenssllevel.ksh to check for an updated version of OpenSSL (1.0.2.1300).
  • Update to check script checkopensshlevel.ksh to check for an updated version of OpenSSH (7.5.102.1100).
  • Update to check script checksystemfirmwarelevel.ksh to check for updated Power7 and Power8 system firwmare levels.
Version: 18.01.01
  • Copyright update of the UNIX Health Check for AIX package from 2017 to 2018.
Version: 17.12.24
  • New check script checkhistsize.ksh to check the value of HISTSIZE.
Version: 17.10.23
  • New check script checkmountguard.ksh to check if cluster JFS2 file systems are protected using the mountguard option.
  • Update to check script checkcompellentdssslevel.ksh to check for the latest version of the Dell Storage Software Suite for AIX, version 3.0.1.6.
  • Update to check script checktmpexecutables.ksh to avoid reporting on file /tmp/clevmgrd.stderr, which is part of PowerHA 7.2.
  • Update to check script checkhomedirs.ksh to avoid generating an error when the cllsfs command displays an empty file system entry, as seen in PowerHA 7.2.
Version: 17.09.26
  • New check script checkpacketloss.ksh to check if packet loss can be detected when pinging the default gateway.
Version: 17.09.20
  • Update to check script checkcurl.ksh to check for the latest version of curl (7.54) available in the AIX Toolbox for Linux Applications.
  • Update to check script checkhttpd.ksh to check for the latest version of httpd (2.4.27) available in the AIX Toolbox for Linux Applications.
  • Update to check script checklibstdc.ksh to check for the correct level of libstdc++ (6.3.0) for AIX 6.1 and up, available in the AIX Toolbox for Linux Applications.
  • Update to check script checklibgcc.ksh to check for the correct level of libgcc (6.3.0) for AIX 6.1 and up, available in the AIX Toolbox for Linux Applications.
  • Update to check script checksudoversion.ksh to check for the latest version of sudo (1.8.20) available in the AIX Toolbox for Linux Applications.
  • Update to check script checksambalevel.ksh to check for the latest version of samba (4.6.4) available in the AIX Toolbox for Linux Applications.
Version: 17.09.19
  • Update to the UNIX Health Check for AIX package to align with the update of the website to https instead of http.
Version: 17.09.05
  • Update to check script checksystemfirmwarelevel.ksh to check for a newly released Power8 system firmware level.
  • Update to the description of check script checkjavalevel.ksh to indicate where to download the latest fixes for Java for AIX.
Version: 17.08.30
  • Update to check script checkhiperapars.ksh to avoid reporting duplicate APARs if IBM specified the same APAR number for different OS levels.
Version: 17.08.23
  • Update to check script checknmapportscan.ksh to remove unnecesary lines and avoid displaying errors.
  • Update to check script checklsof.ksh to allow both the fileset and RPM version of lsof to be installed and used.
  • Update to check script checkbash.ksh to check for bash version 4.4 (from Perzl.org) or version 4.3.30 (from the AIX Toolbox for Linux applications).
  • Update to check script checkgettext.ksh to check for gettext version 0.17 (from Perzl.org) or version 0.19.7 (from the AIX Toolbox for Linux applications).
Version: 17.08.22
  • Update to check script checkwget.ksh to check for wget version 1.19.1 (from Perzl.org) or version 1.17.1 (from the AIX Toolbox for Linux applications).
  • Update to check script checksudoversion.ksh to check for sudo version 1.8.20 (from Perzl.org) or version 1.8.15 (from the AIX Toolbox for Linux applications).
  • Update to check script checklibstdc.ksh to check for libstdc++ version 4.8.3 (from Perzl.org) or version 4.8.5 (from the AIX Toolbox for Linux applications).
  • Update to check script checklibpng.ksh to check for libpng version 1.6.31 (from Perzl.org) or version 1.6.27 (from the AIX Toolbox for Linux applications).
  • Update to check script checklibgcc.ksh to check for libgcc version 4.8.3 (from Perzl.org) or version 4.8.5 (from the AIX Toolbox for Linux applications).
  • Update to check script checkgnutar.ksh to check for the latest GNU tar version from the AIX Toolbox for Linux applications, version 1.29.
  • Update to check script checkgmp.ksh to check for gmp installed at either version 5.1.2 (from AIX Toolbox for Linux applications) or 6.0.0 (from Perzl.org).
  • Update to check script checkcurl.ksh to check for the latest version of curl installed, either version 7.53 or version 7.55.
  • Update to check script checkbash64.ksh to check for bash64 version 4.4.
  • Update to check script checkxlclevel.ksh to recommend ethe latest version of the XL C/C++ Runtime for AIX, version 13.1.3.3.
  • Update to check script checkxivhaklevel.ksh to recommend version 2.8.0 of the IBM Storage Host Attachment Kit for AIX.
  • Update to check script checkviosioslevel.ksh to recommend updating a VIOS to at least version 2.2.5x.
  • Update to check script checksystemfirmwarelevel.ksh to check for newly release IBM system firmware levels for Power7 and Power7+ systems.
  • Update to check script checksddpcmlevel.ksh to recommend SDDPCM level 2.7.0.0.
  • Update to check script checkpatrollevel.ksh to recommend verison 3.8.50i of the BMC Patrol Agent.
  • Update to check script checkopenssllevel.ksh to check for the latest version of OpenSSL, version 1.0.2k, VRMF: 1.0.2.1100.
  • Update to check script checkopensshlevel.ksh to check for the latest version of OpenSSH, version 7.1p1, VRMF: 7.1.102.1100.
  • Update to check script checknmaplevel.ksh to check for the latest version of NMAP, version 6.00.
  • New check script checktmspagingspace.ksh to check if there is at least 32 GB of paging space on a system running Tivoli Storage Manager / IBM Spectrum Protect.
  • New check script checktsmame.ksh to check if Active Memory Expansion is disabled when running Tivoli Storage Manager / IBM Spectrum Protect.
  • Update to check script checklsoflevel.ksh to keep in line with the AIX Web Download pack version of lsof.
Version: 17.08.21
  • Update to check script checkjavalevels.ksh to check for the latest Java levels to be installed. Also added a check for Java8, and added a remark for Java5 being out of support.
  • Update to check script checkjavalevel.ksh to add some comments to the script about the available Java levels.
  • Update to check script checkgnupglevel.ksh to recommend using the latest version of GnuPG, version 1.4.22-1.
  • Update to check script checkgangliagmondlevel.ksh to recommend the latest Ganglia gmond version to be installed.
  • Update to check script checkgangliagmetadlevel.ksh to recommend the latest Ganglia gmetad version to be installed.
  • Update to check script checkfirefoxlevel.ksh to recommend version 3.6.
  • Update to check script checkemcpowerpathlevel.ksh to recmmend new levels for EMC PowerPath.
  • Update to check script checkemcodmlevel.ksh to recommend new EMC ODM definitions levels for Dell EMC attached storage.
  • Update to check script checkemcnavispherelevel.ksh to recommend a new level of the EMC NaviSphere Host agent to be installed.
  • Update to check script checkdevicesfcplevel.ksh to update the recommended version of the AIX SDDPCM Host attachment device software devices.fcp.disk.ibm.mpio.rte.
  • Update to check script checktsmlevel.ksh to add an extra method to check the TSM / IBM Spectrum Protect server level, and updating the way the TSM client version is identified, as it has been renamed by IBM from TSM to IBMSP.
  • Update to check script checktsmbackup.ksh to add the full path to the dsm.sys file in the output presented by the script.
Version: 17.08.20
  • Update to check script checksanpvid.ksh to avoid checking PowerHA repository disks as they may not be assigned to any volume group.
Version: 17.08.17
  • Update to check script checklspath.ksh to add comments to the output.
Version: 17.08.15
  • New check script checkntpdatentppool.ksh to check the time offset of the server versus a stratum 2 internet time server.
  • Update to check script checkntpdate.ksh to only query the NTP offset status, and not attempt to change it.
Version: 17.08.11
  • New check script checkpowerharepositories.ksh to display the PowerHA/HACMP repository disks.
Version: 17.08.10
  • New check script checklspvu.ksh to display the disks on the system, along with the Unique device identifier (UDID) and Universally Unique Identifier (UUID).
Version: 17.08.09
  • Update to checkcommonfilesets.ksh to suggest fewer filesets to be de-installed, when PowerHA 7.2 is used on the system, as AIX Runtime Expert can be used by PowerHA 7.2, which requires certain filesets to be installed.
Version: 17.08.01
  • Update to check script checkauthorizedkeys.ksh to only display output if any output from the authorized_keys file is to be displayed, especially in cases with PowerHA cluster nodes, that are not yet configured in a PowerHA cluster.
  • New check script checkpowerhalevelinstalled.ksh to display the level of PowerHA (HACMP) installed.
  • Update to check script checkall.ksh to also display the output of "halevel -s" when available.
Version: 17.07.23
  • Update to check script checkpowerhacrontabs.ksh to avoid reporting differences in crontabs on PowerHA nodes when only spaces, comments or tabs are different.
Version: 17.07.19
  • Update to check script checkoslevel.ksh to recommend upgrading to AIX 7.2 when AIX 7.1 is installed.
  • New check script checkrpmduplicates.ksh to check for any RPM packages that were installed multiple times.
  • Update to check script checkpowerhalevel.ksh to update certain recomendations for PowerHA levels, as some of the PowerHA levels have moved to End-of-Service-Pack mode.
  • Update to check script checkpowerhaconfigfiles.ksh to remove checking for differences beteen the /etc/filesystems on two nodes of a PowerHA SystemMirror/HACMP cluster.
  • New check script checkpowerhaetcfilesystems.ksh to compare the stanzas in /etc/filesystems on two nodes of a PowerHA SystemMirror/HACMP cluster.
Version: 17.07.18
  • Update to check script checknonlocsrcroute.ksh to no longer recommend making changes on PowerHA/HACMP nodes regarding this network option, as later versions of PowerHA SystemMirror no longer require this option to be set.
  • Update to check script checknfsclientdaemons.ksh to only alert about an empty /etc/exports file if the server is not a NIM server.
  • Update to check script checkinstalldate.ksh to remove an error with a missing fi statement.
  • Update to check script checkzlib.ksh to check for an updated version of zlib installed on the system. A new version of zlib (1.2.11) is available in the AIX Toolbox for Linux Applications.
  • Update to check script checksambalevel.ksh to check for an updated version of samba installed on the system. A new version of samba (4.5.7) is available in the AIX Toolbox for Linux Applications.
  • Update to check script checkrsynclevel.ksh to check for an updated version of rsync installed on the system. A new version of rsync (3.1.2) is available in the AIX Toolbox for Linux Applications.
  • Update to check script checklibstdc.ksh to make a different recommendation for AIX 6.1 for the level of libstdc to be installed, as different levels of libstdc are available in the AIX Toolbox for Linux Applications for AIX 7.x and AIX 6.1.
  • Update to check script checklibpng.ksh to check for an updated version of libpng installed on the system. A new version of libpng (1.6.27) is available in the AIX Toolbox for Linux Applications.
  • Update to check script checklibgcc.ksh to make a different recommendation for AIX 6.1 for the level of libgcc to be installed, as different levels of libgcc are available in the AIX Toolbox for Linux Applications for AIX 7.x and AIX 6.1.
  • Update to check script checkhttpd.ksh to check for an updated version of httpd installed on the system. A new version of httpd (2.4.25) is available in the AIX Toolbox for Linux Applications.
  • Update to check script checkcurl.ksh to check for an updated version of curl installed on the system. A new version of curl (7.53.1) is available in the AIX Toolbox for Linux Applications.
  • Update to check script checkpowerhalevel.ksh to update for PowerHA 7.2.
  • Update to check script checkoslevel.ksh to update for new service packs released for AIX 7.2.
  • Update to check script checkall.ksh to improve on determining the fully qualified domain name, avoiding two or more domain names when those are present in /etc/resolv.conf.
  • Update to check script checkcompellentdssslevel.ksh to make different recommendations for the level of the Dell Storage Software Suite to be installed, depending on the AIX OS level installed.