Overview of updates - RHEL version

Latest available version: 25.09.02

Overview of the most recent updates to UNIX Health Check for Red Hat Enterprise Linux:

Version: 25.09.02
  • Update to check script checkatd.sh to update the dnf / yum commands used.
  • Update to the description of check script checkauditrules.sh to fix a typo.
  • Update to check script checkauthorizedkeysentries.sh to improve checking of SSH authorized keys files for RHEL 10.
  • Update to the description of check script checkblankpassword.sh to provide additional information.
  • Update to check script checkcifsnetdev.sh to replace the egrep command with grep -E.
  • Update to check script checkall.sh to replace the egrep command with grep -E.
  • Update to check script checkcleanetcmail.sh to replace the egrep command with grep -E.
  • Update to check script checkcleanetc.sh to replace the egrep command with grep -E.
  • Update to check script checkcleanetcssh.sh to replace the egrep command with grep -E.
  • Update to check script checkcleanetcsysconfig.sh to replace the egrep command with grep -E.
  • Update to check script checkcleanroot.sh to replace the egrep command with grep -E.
  • Update to check script checkcpuload.sh to replace the egrep command with grep -E.
  • Update to check script checkcrontabcommandsexec.sh to replace the egrep command with grep -E.
  • Update to check script checkcrontabcommands.sh to replace the egrep command with grep -E.
  • Update to check script checkcrontabdups.sh to replace the egrep command with grep -E.
  • Update to check script checkdavfsnetdev.sh to replace the egrep command with grep -E.
  • Update to check script checkdnslookup.sh to replace the egrep command with grep -E.
  • Update to check script checkenvironment.sh to replace the egrep command with grep -E.
  • Update to check script checketcfstabfilesystems.sh to replace the egrep command with grep -E.
  • Update to check script checketcgroupperms.sh to replace the egrep command with grep -E.
  • Update to check script checketchostsduplicates.sh to replace the egrep command with grep -E.
  • Update to check script checketchostsdups.sh to replace the egrep command with grep -E.
  • Update to check script checketchostsnohostname.sh to replace the egrep command with grep -E.
  • Update to check script checketchostsvsdns.sh to replace the egrep command with grep -E.
  • Update to check script checketcpasswdperms.sh to replace the egrep command with grep -E.
  • Update to check script checkfreespaceinfs.sh to replace the egrep command with grep -E.
  • Update to check script checkfsreadonly.sh to replace the egrep command with grep -E.
  • Update to check script checketcshadowperms.sh to replace the egrep command with grep -E.
  • Update to check script checkgecos.sh to replace the egrep command with grep -E.
  • Update to check script checkhomedirs.sh to replace the egrep command with grep -E.
  • Update to check script checkhostname.sh to replace the egrep command with grep -E.
  • Update to check script checkhostnamevsdns.sh to replace the egrep command with grep -E.
  • Update to check script checkhyperthreading.sh to replace the egrep command with grep -E.
  • Update to check script checkinittabcommands.sh to replace the egrep command with grep -E.
  • Update to check script checklvmconfbackup.sh to replace the egrep command with grep -E.
  • Update to check script checkmailq.sh to replace the egrep command with grep -E.
  • Update to check script checkmultipleipinetchosts.sh to replace the egrep command with grep -E.
  • Update to check script checknameservers.sh to replace the egrep command with grep -E.
  • Update to check script checknfsaccess.sh to replace the egrep command with grep -E.
  • Update to check script checknfsconfig.sh to replace the egrep command with grep -E.
  • Update to check script checknfsnetdev.sh to replace the egrep command with grep -E.
  • Update to check script checkopennfsexports.sh to replace the egrep command with grep -E.
  • Update to check script checkpostfixsmtpconnection.sh to replace the egrep command with grep -E.
  • Update to check script checkresolvconf.sh to replace the egrep command with grep -E.
  • Update to check script checkrootrhosts.sh to replace the egrep command with grep -E.
  • Update to check script checksendmailsmtpconnection.sh to replace the egrep command with grep -E.
  • Update to check script checkshowmount.sh to replace the egrep command with grep -E.
  • Update to check script checksnmp.sh to replace the egrep command with grep -E.
  • Update to check script checksockets.sh to replace the egrep command with grep -E.
  • Update to check script checksudocommands.sh to replace the egrep command with grep -E.
  • Update to check script checksudoersusers.sh to replace the egrep command with grep -E.
  • Update to check script checksuid.sh to replace the egrep command with grep -E.
  • Update to check script checktelnetserver.sh to replace the egrep command with grep -E.
  • Update to check script checktmout.sh to replace the egrep command with grep -E.
  • Update to check script checktmpmounts.sh to replace the egrep command with grep -E.
  • Update to check script checktopcpuusers.sh to replace the egrep command with grep -E.
  • Update to check script checktsmbackup.sh to replace the egrep command with grep -E.
  • Update to check script checktsmsched.sh to replace the egrep command with grep -E.
  • Update to check script checkuidzero.sh to replace the egrep command with grep -E.
  • Update to check script checkvnbbackup.sh to replace the egrep command with grep -E.
  • Update to check script checkvnbserver.sh to replace the egrep command with grep -E.
  • Update to check script checketchostsduplicates.sh to exclude localhost from checking.
  • Update to check script checkfsreadonly.sh to avoid checking /boot/efi.
  • Update to check script checkhistappend.sh to fix a grep command.
  • Update to check script checkmlocate.sh to avoid checking on Red Hat Enterprise Linux 10.
  • Update to check script checkmultipleipinetchosts.sh to avoid checking localhost.
  • Update to check script checksudocommands.sh to fix a grep command.
  • Update to check script checksudocommandsexec.sh to fix a grep command.
  • Update to check script checkusersloggedonlongtime.sh to avoid a syntax error.
  • Update to check script checkwget.sh to provide the command to install wget.
  • Update to check script checkiotop.sh to check for packages iotop and iotop-c.
  • Update to check script checkrpmv.sh to avoid checking files in /boot/grub2.
  • Update to check script checkentropy.sh to lower the recommended entropy due to kernel changes.
  • Update to check script checkmcelog.sh to exclude an additional entry.
  • Update to check script checksudoerspasswords.sh to avoid testing passwords of users with increased rounds of password hashing.
  • Update to check script checkfsdirwrite.sh to avoid checking /run/user file systems.
  • Validation of Red Hat Enterprise Linux 10.0 completed.
Version: 25.02.04
  • Update to the description of check script checknmapportscan.sh to indicate an alternative command to display the open ports on the system.
Version: 25.01.06
  • Update to all check scripts to update the copyright message for 2025.
Version: 24.12.12
  • Updated the signature for the RPM package of UNIX Health Check for Red Hat Enterprise Linux to a SHA256 signature.
Version: 24.05.17
  • Update to check script checkoslevel.sh to recommend version 9.4 for Oracle Linux.
Version: 24.05.15
  • New check script checkprocpsnginstalled.sh to check if the procps-ng RPM package is installed on the system.
  • New check script checkiputilsinstalled.sh to check if the iputils RPM package is installed on the system.
Version: 24.05.13
  • New check script checkhostnameinstalled.sh to check if the hostname RPM package is installed on the system.
  • Update to check script checkcleanetcssh.sh to include a check if directory /etc/ssh exists before proceeding.
  • Update to check script checkbinbasenameperms.sh to allow an additional set of permissions for /bin/basename.
  • Update to check script checkall.sh to correctly display the logfile name in the results section.
  • Update to check script checkall.sh to redirect errors of the dmidecode command to /dev/null.
  • Update to check script checkcifsnetdev.sh to check for the existence of file /etc/fstab before proceeding.
  • Update to check script checkcpuload.sh to check for the existence of the vmstat command before proceeding.
  • Update to check script checkcrash.sh to check for the existence of the /var/crash folder before proceeding.
  • Update to check script checkcrondprocesses.sh to check for the existence of /bin/ps before proceeding.
  • Update to check script checkcronsystemcronfiles.sh to redirect errors of the find command to /dev/null.
  • Update to check script checkcrontabdups.sh to check for the existence of folder /var/spool/cron before proceeding.
  • Update to check script checkcrontabsunused.sh to check for the existence of folder /var/spool/cron before proceeding.
  • Update to check script checkdavfsnetdev.sh to check for the existence of file /etc/fstab before proceeding.
  • Update to check script checkdeployment.sh to redirect errors of the hostnamectl command to /dev/null.
  • Update to check script checkdevnull.sh to also allow the user:group to be set to nobody:nobody.
  • Update to check script checkdnslookupmultipleip.sh to check for the existence of /bin/ps before proceeding.
  • Update to check script checketcnamedconfperms.sh to check for the existence of /bin/ps before proceeding.
  • Update to check script checkfind.sh to check for the existence of /bin/ps before proceeding.
  • Update to check script checkfritzfrog.sh to redirect errors of the netstat command to /dev/null.
  • Update to check script checkfsmounted.sh to redirect errors of the cat command to /dev/null.
  • Update to check script checkfsmountpoint.sh to redirect errors of the cat command to /dev/null.
  • Update to check script checkfsreadonly.sh to check for the existence of /etc/fstab before proceeding.
  • Update to check script checkgangliagmetadrunning.sh to check for the existence of /bin/ps before proceeding.
  • Update to check script checkgangliagmondrunning.sh to check for the existence of /bin/ps before proceeding.
  • Update to check script checkguestagent.sh to redirect errors of the dmidecode command to /dev/null.
  • Update to check script checkhighcpu.sh to check for the existence of /bin/ps before proceeding.
  • Update to check script checkhostname.sh to redirect errors of the hostnamectl command to /dev/null.
  • Update to check script checkhyperthreading.sh to redirect errors of the dmidecode command to /dev/null.
  • Update to check script checkkernelmatchinginitramfs.sh to redirect errors of the ls command to /dev/null.
  • Update to check script checkleapvulnerability.sh to check for the existence of the /bin/ps command before proceeding.
  • Update to check script checklocalhost.sh to check for the existence of the /bin/ping command before proceeding.
  • Update to check script checklocation.sh to redirect errors of the hostnamectl command to /dev/null.
  • Update to check script checklvmpoolusage.sh to check for the existence of the /sbin/lvs command before proceeding.
  • Update to check script checkmemoryutilization.sh to check for the existence of the /bin/free command before proceeding.
  • Update to check script checkmemvscpu.sh to ensure either dmidecode or free provides the memory information before proceeding.
  • Update to check script checknfsnetdev.sh to check for the existence of file /etc/fstab before proceeding.
  • Update to check script checknfsnodename.sh to check for the existence of file /etc/fstab before proceeding.
  • Update to check script checkopennfsexports.sh to check for the existence of the /bin/ps command before proceeding.
  • Update to check script checkpacketloss.sh to check for the existence of the /bin/ping command before proceeding.
  • Update to check script checkpatrolagent.sh to check for the existence of the /bin/ps command before proceeding.
  • Update to check script checkpatrolpukremote.sh to check for the existence of the /bin/ps command before proceeding.
  • Update to check script checkpatrolpukserver.sh to check for the existence of the /bin/ps command before proceeding.
  • Update to check script checkpwd.sh to check for the existence of the /bin/ps command before proceeding.
  • Update to check script checkscript.sh to check for the existence of the /bin/ps command before proceeding.
  • Update to check script checksnmp.sh to check for the existence of the /bin/ps command before proceeding.
  • Update to check script checksudocommands.sh to redirect errors of the cat command to /dev/null.
  • Update to check script checksudocommandsexec.sh to redirect errors of the cat command to /dev/null.
  • Update to check script checkswapminsize.sh to check for the existence of the /bin/free command before proceeding.
  • Update to check script checkswapusage.sh to check for the existence of the /bin/free command before proceeding.
  • Update to check script checksyslogdremote.sh to check for the existence of the /bin/ps command before proceeding.
  • Update to check script checktemperature.sh to check for the existence of the /bin/bc command before proceeding.
  • Update to check script checkthreads.sh to check for the existence of the /bin/ps command before proceeding.
  • Update to check script checktimedatectlntpenabled.sh to redirect errors of the timedatectl command to /dev/null.
  • Update to check script checktop20memoryprocs.sh to check for the existence of the /bin/ps command before proceeding.
  • Update to check script checktopcpuusers.sh to check for the existence of the /bin/ps command before proceeding.
  • Update to check script checkupdate.sh to redirect errors of the ps command to /dev/null.
  • Update to check script checkuptime.sh to check for the existence of the /bin/uptime command before proceeding.
  • Update to the description of check script checkvarempty.sh to remove a typo.
  • Update to check script checkvarrunpid.sh to redirect errors of the ls command to /dev/null.
  • Update to check script checkwtmpsize.sh to improve the output message.
  • Update to check script checkzombies.sh to check for the existence of /bin/ps before proceeding.
  • Update to check script checkadminpassword.sh to check for the existence of /bin/perl before proceeding.
  • Update to check script checkall.sh to avoid the usage of perl.
  • Update to check script checkuidzeropassword.sh to exit quietly if perl is not available.
  • Update to check script checktsmsched.sh to exit quietly if perl is not available.
  • Update to check script checktsmbackup.sh to exit quietly if perl is not available.
  • Update to check script checksupportpassword.sh to exit quietly if perl is not available.
  • Update to check script checksudoerspassword.sh to exit quietly if perl is not available.
  • Update to check script checkoraclepassword.sh to exit quietly if perl is not available.
  • Update to check script checkmanagerpassword.sh to exit quietly if perl is not available.
  • Update to check script checketchostsfile.sh to exit quietly if perl is not available.
  • Update to check script checketchostsdups.sh to exit quietly if perl is not available.
  • Update to check script checketchosts.sh to check for the existence of the /bin/hostname command before proceeding.
  • Update to check script checkneedsrestarting.sh to avoid incorrectly reporting that a restart is required.
Version: 23.07.18
  • New check script checkdmesgerrors.sh to check for any errors reported by the dmesg command.
Version: 23.02.13
  • Update to check script checkuserpassword.sh to allow it to work correctly with Python v3 which has a different syntax for the crypt method.
  • Update to check script checksudoerspassword.sh to allow it to work correctly with Python v3 which has a different syntax for the crypt method.
  • Update to check script checkpostfixsmtp.sh to account for a SMTP port being configured in /etc/postfix/main.cf.
  • Update to check script checkpostfixsmtpconnection.sh to account for non-standard SMTP ports used.
  • Update to check script checkinterface.sh to avoid reporting an issue on a missing configuration file in /etc/sysconfig/network-scripts, when NetworkManager is used.
  • Update to the description of checkrngd.sh to remove a space.
  • Update to check script checkdnsdomain.sh to check for the nslookup binary before running it.
  • Update to check script checkbootgrub2grubcfgperms.sh to recommend mode 600 for /boot/grub2/grub.cfg.
  • Update to check script checkall.sh to improve the determination of the IPv4 method of assigning IP addresses.
Version: 23.02.13
  • Update to the description of check script checktraceroute.sh to fix a typo.
Version: 22.07.20
  • Update to check script checkoslevel.sh to update the preferred Operating System level for Oracle Linux to 9.0.
Version: 22.06.11
  • Update to check script checketchosts.sh to avoid checking commented entries in /etc/hosts.
Version: 22.06.07
  • Update to check script checkoslevel.sh to update the preferred Operating System level for Alma Linux to 9.0.
  • Update to check script checksubscriptionmanager.sh to ignore Alma Linux 9.0 by checking /etc/almalinux-release.
Version: 22.05.23
  • Update to check script checkpathfolders.sh to also check for important folders to be part of PATH, such as /usr/bin and /usr/sbin.
Version: 22.05.22
  • Update to check script checkusrsbinsestatusperms.sh to allow for a larger range of file sizes of binary sestatus on Red Hat Enterprise Linux 9.
  • Update to check script checkmailroot.sh to avoid reporting messages from s-nail on Red Hat Enterprise Linux 9.
Version: 22.05.21
  • Update to check script checkmcelog.sh to exclude additional entries from mcelog to avoid an error code situation.
  • Update to check script checksharutils.sh to indicate which repo to enable when installing sharutils.
  • Update to check script checkctrlaltdel.sh to avoid alerting when ctrl-alt.del.target is aliased to reboot.target.
  • Update to check script checkusrsbinsestatusperms.sh to check /usr/bin/sestatus instead on Red Hat Enterprise Linux 9.
  • Update to check script checkmailxinstalled.sh to avoid running this check on Red Hat Enterprise Linux 9 as mailx was replaced with s-nail.
  • Update to check script checklogrotate.sh to check logrotate.timer instead of /etc/cron.daily/logrotate on Red Hat Enterprise Linux 9.
  • Update to check script checkinterface.sh to check files in folder /etc/NetworkManager/system-connections/ instead of /etc/sysconfig/network-scripts on Red Hat Enterprise Linux 9.
  • Update to check script checketcrcdperms.sh to no longer check on Red Hat Enterprise Enterprise Linux 9, as this functionality was removed.
  • Update to check script checketclogrotatedsyslog.sh to check file rsyslog instead of syslog in Red Hat Enterprise Linux 9.
  • Update to check script checkdevconsole.sh to account for the new permissions of /dev/console in Red Hat Enterprise Linux 9.
  • Update to check script checkabrtinstalled.sh to avoid running on Red Hat Enterprise Linux 9 and up, as the ABRT tool has been removed in this version.
  • Update to check script checkcleanetcssh.sh to exclude reporting on folder /etc/ssh/sshd_config on Red Hat Enterprise Linux 9 and up.
Version: 22.05.20
  • Update to check script checkoslevel.sh to recommend newer levels for CentOS Stream, Rocky Linux, Alma Linux and Red Hat Enterprise Linux.
  • Update to check script checklvmconfbackup.sh to avoid warning for unset settings on RHEL 8.6 and up because several settings are now defaults if not configured.
  • Update to check script checkcleanupkernels.sh to provide a command to remove unncessary kernels.
  • Update to check script checkcleanupkernels.sh to ignore a message from yum repoquery that my inadvertently cause the script to alert.
  • Update to the description of check script checksystemctldegraded.sh to indicate that the kdump service may fail if there is less than 2 GB memory allocated on the system.
  • Update to check script checkmemoryminsize.sh to improve determination if memory is reported in MB or GB.
  • Update to check script checkhostname.sh to correct an issue with checking /etc/hostname.
  • Update to check script checkmcelog.sh to update the yum command to install mcelog.
  • Update to the description of check script checkauditrules.sh to remove a typo.
Version: 22.05.03
  • Update to check script checketcfstabfilesystems.sh to avoid reporting on file systems of type squashfs.
  • Update to check script checkinodeusage.sh to avoid reporting on file systems of type squashfs.
Version: 22.04.26
  • Update to check script checkvsftpdanonymous.sh to avoid reporting on commented entries in vsftpd.conf file.
Version: 22.03.09
  • New check script checketcfstabuuid.sh to check if the correct UUIDs are listed in /etc/fstab.
Version: 22.02.18
  • New check script checkbootpartition.sh to check if the /boot folder is located on a separate partition.
  • New check script checklsinitrd.sh to check if all the initramfs files in the /boot folder are valid.
  • New check script checkcleanupkernels.sh to check if old kernels are properly removed.
  • New check script checkkernelmatchinginitramfs.sh to check if a matching initramfs is available for each installed kernel.
Version: 21.11.17
  • Update to check script checkyumcheckupdate.sh to only alert about possible updates when yum update also indicates that packages would be installed during a system update.
Version: 21.11.15
  • Fixed a typo in the output of check script checkctrlaltdel.sh.
  • Update to check script checkrngd.sh to remove the -y option for the yum install command.
  • Update to check script checkkdumpctl.sh to redirect stderr to stdout for the kdumpctl command, to allow for a proper check of the kdump status.
  • Update to check script checksharutils.sh to allow for a different command to install sharutils on CentOS.
  • Update to check script checksharutils.sh to allow for a different command to install sharutils on Rocky Linux.
  • Disabled check script checkvmlinuxfirmware.sh to avoid unnecessary alerts when the linux-firmware package is installed on a VM.
  • Update to check script checkoslevel.sh to recommend version 8.5.2111 of CentOS, as well as updates for Rocky Linux and AlmaLinux.
Version: 21.10.11
  • Update to check script checkspectremeltdown.sh to upgrade the script from version 3.1 to version 3.3 (latest).
Version: 21.10.03
  • Update to check script checkfsdirwrite.sh to exclude file systems of type efivarfs.
  • Update to check script checkgrub2cfg.sh to avoid running on UEFI based systems.
  • Update to check script checkmemvscpu.sh to account for systems not reporting memory via dmidecode -t memory.
  • Update to check script checkoslevel.sh to recommend version 8.4.2105 of CentOS to be installed.
Version: 21.08.18
  • Update to check script checksubscriptionmanager.sh to allow it to work correctly on Rocky Linux.
  • Update to check script checkcleanetcsysconfig.sh to allow it to work correctly on Rocky Linux.
Version: 21.08.17
  • Support added for Alma Linux and Rocky Linux.
  • Update to check script checkall.sh to allow it to work correctly on Rocky Linux.
  • Update to check script checkl1tf.sh to allow it to work correctly on Rocky Linux.
  • Update to check script checklastlogperms.sh to allow it to work correctly on Rocky Linux.
  • Update to check script checkvarlogbtmpperms.sh to allow it to work correctly on Rocky Linux.
  • Update to check script checkyumconfperms.sh to allow it to work correctly on Rocky Linux.
  • Update to check script checkyumutils.sh to allow it to work correctly on Rocky Linux.
Version: 21.05.05
  • Support added for CentOS Stream.
  • Update to check script checkyumutils.sh to test for both packages yum-utils and dnf-utils on systems with version 8 and up.
Version: 21.05.03
  • Update to check script checkall.sh to indicate that UNIX Health Check for Red Hat Enterprise Linux is suitable only for specific operating systems only.
  • Update to check script checkrngd.sh to correctly discover if rngd is active on the system.
  • Update to check script checkoslevel.sh to adapt it for CentOS Stream.
  • Update to check script checksharutils.sh to use the dnf command on CentOS 8 and up to install the sharutils command using the PowerTools repository.
Version: 21.04.01
  • Update to check script checklastlogperms.sh to allow it to work correctly on AlmaLinux.
  • Update to check script checkvarlogbtmpperms.sh to allow it to work correctly on AlmaLinux.
  • Update to check script checkyumconfperms.sh to allow it to work correctly on AlmaLinux.
  • Update to check script checkyumutils.sh to allow it to work correctly on AlmaLinux.
  • Update to check script checkhisttimeformat.sh to correct the output shown.
Version: 21.03.31
  • Update to check script checkall.sh to enable it for AlmaLinux.
  • Update to check script checkfsdirwrite.sh to exclude tracefs type file systems.
  • Update to check script checkfsmounted.sh to properly exclude swap mounts.
  • Update to check script checkl1tf.sh to allow it to work correctly on AlmaLinux.
Version: 21.01.18
  • Update to check script checkdfsummary.sh to avoid counting duplicate mounted file systems.
Version: 20.12.18
  • Update to check script checkoslevel.sh to recommend version 8.3 for CentOS, Red Hat Enterprise Linux and Oracle Linux.
Version: 20.11.30
  • Update to check script checkrpm.sh to clean up temporary files used by the script.
Version: 20.11.18
  • Update to check script checkhomedirs.sh to avoid reporting errors on empty lines in /etc/passwd.
Version: 20.11.13
  • Update to check script checkcleansshdir.sh to allow the config file within the ~root/.ssh folder.
  • Update to check script checkcleansshdiroracle.sh to allow the config file within the ~oracle/.ssh folder.
Version: 20.11.12
  • New check script checksentinelone.sh to check the SentinelOne agent, if installed on the system.
Version: 20.11.11
  • Update to check script checkhostnamevsdns.sh to ensure any multiple DNS entries are printed out as part of the output.
  • Update to check script checkmodelname.sh to also attempt to use lshw, if installed, to determine the system model.
  • Update to check script checkmodelname.sh to display the IBM Model in case the system is running Linux on Power hardware.
  • Update to check script checkall.sh to also attempt to use lshw, if installed, to determine the system model.
  • Update to check script checkoslevel.sh to recommend updating to version 7.9 of Red Hat Enterprise Linux and Scientific Linux and/or version 8.2 of Red Hat Enterprise Linux, CentOS, and Oracle Linux.
  • Update to check script checkrpmv.sh to list only the first 100 entries, in case there are more than 100 entries shown by the rpm -Va command.
Version: 20.11.10
  • New check script checkmounts.sh to check the number of file system mount points on the system.
  • Update to check script checkmount.sh to only display the first 100 entries of the output of the mount command.
  • Update to check script checkhostnamevsdns.sh to work correctly if there are multiple DNS entries present for the IP address of the system.
  • Update to check script checkpatrollevel.sh to check for version 11.3 of BMC Patrol Agent or higher.
Version: 20.11.08
  • Update to the description of the check script checkcpucount.sh to include information about the nproc command.
Version: 20.09.28
  • Update to check script checkemcpowerpathlevel.sh to recommend updating Dell EMC PowerPath to version 7.2.
Version: 20.08.28
  • New check script checkfritzfrog.sh to check if there are any indicators for the FritzFrog malware.
  • Update to check script checkuptime.sh to update the category of the check script.
Version: 20.08.26
  • New check script checksg3utils.sh to check if the sg3_utils RPM is installed.
Version: 20.08.24
  • Update to check script checklvmpoolusage.sh to clean up the temporary file used.
Version: 20.08.17
  • New check script checklvmpoolusage.sh to check the usage of LVM pools.
Version: 20.08.10
  • Update to the description of check script checkbios.sh, to explain the information provided by this check script on virtual infrastructure.
Version: 20.07.29
  • New check script checklast.sh to check the owner and permissions of /usr/bin/last.
  • Update to check script checktemperature.sh to improve cpu core temperature monitoring.
Version: 20.07.16
  • Update to check script checksubscriptionmanagerinstalled.sh to avoid reporting the message on non-Red Hat Enterprise Linux systems when podman is installed as well.
Version: 20.07.09
  • New check script checkentropy.sh to check the available entropy (randomness) on the system.
  • New check script checkrngd.sh to check if rngd is running.
Version: 20.06.26
  • Update to check script checksyslogdremote.sh to correct a typo in a comment.
Version: 20.06.22
  • New check script checkvarrunpid.sh to check for any pid files in /var/run without a running program.
Version: 20.06.15
  • Update to check script checkemcpowerpathlevel.sh to recommend version 7.1 of Dell EMC PowerPath.
Version: 20.05.26
  • Update to check script checkall.sh to include MB for the paging space size of the system.
  • Update to check script checkbondlink.sh to indicate when a bonded network interface is configured on the system without any slave interfaces.
  • Update to check script checkmemoryminsize.sh to account for huge memory sizes (1 TB and up).
  • Update to check script checkoraclepassword.sh to correctly check for passwords on Oracle Linux 6.10.
  • Update to check script checkadminpassword.sh to correctly check for passwords on Oracle Linux 6.10.
  • Update to check script checkhaltpassword.sh to correctly check for passwords on Oracle Linux 6.10.
  • Update to check script checkmanagerpassword.sh to correctly check for passwords on Oracle Linux 6.10.
  • Update to check script checkshutdownpassword.sh to correctly check for passwords on Oracle Linux 6.10.
  • Update to check script checksupportpassword.sh to correctly check for passwords on Oracle Linux 6.10.
  • Update to check script checkuidzeropassword.sh to correctly check for passwords on Oracle Linux 6.10.
  • Update to check script checkrpm.sh to output the issues found by the rpm -V command.
  • Update to check script checkthreadsperuser.sh to find the bc utility in the correct folder on Oracle Linux 6.10.
  • Update to check script checkifconfig.sh to correctly report the network interface configuration on Oracle Linux 6.10 with bonded network interfaces.
Version: 20.05.24
  • Update to check script checknfsnodename.sh to exclude checking entries that are commented out in /etc/fstab.
Version: 20.04.26
  • Update to check script checkoslevel.sh to recommend new releases.
  • Update to check script checknroffilesinfilesystems.sh to only report on local file systems.
  • New check script checknfsutils.sh to check if the nfs-utils RPM package has been installed on the system.
  • Update to check script checkcleanetc.sh to exclude checking for file /etc/nsswitch.conf.bak.
Version: 20.04.25
  • Update to check script checkexports.sh to avoid reporting on entries that start with a dash and to improve detection of duplicate entries.
Version: 20.04.24
  • Update to checkall.sh to allow for files to be excluded within an external file with both short and full path file names.
  • Update to check script checkvarspoolperms.sh to update the text of the output generated.
  • Update to check script checkvarspoolmqueueperms.sh to update the text of the output generated.
  • Update to check script checketcsecurityperms.sh to update the text of the output generated.
  • Update to check script checkrhsmconfperms.sh to update the text of the output generated.
  • Update to check script checkusrbincrontabperms.sh to update the text of the output generated.
  • Update to check script checkusrperms.sh to update the text of the output generated.
  • Update to check script checkusrsbincrondperms.sh to update the text of the output generated.
  • Update to check script checkvarempty.sh to update the text of the output generated.
  • Update to check script checkvarspoolclientmqueueperms.sh to update the text of the output generated.
  • Update to check script checkvarspoolcronperms.sh to update the text of the output generated.
  • Update to check script checkvarspoollpdperms.sh to update the text of the output generated.
  • Update to check script checkvartmpperms.sh to update the text of the output generated.
  • Update to check script checkusernetrc.sh to update the text of the output generated.
  • Update to check script checkuserbashrc.sh to update the text of the output generated.
  • Update to check script checksudoersusers.sh to exclude all empty lines of lines that start with a space, but are commented out.
  • Update to check script checksudoersduplicates.sh to remove a typo.
  • Update to check script checkcrontabcommands.sh to ignore lines starting with spaces and/or tabs in front of a comment character.
  • Update to check script checkcrontabcommandsexec.sh to ignore lines starting with spaces and/or tabs in front of a comment character.
  • Update to check script checkcrontabdups.sh to ignore lines starting with spaces and/or tabs in front of a comment character.
Version: 20.03.25
  • Update to checkall.sh to allow providing text files listing scripts for both the -s (to include check scripts) and the -E (to exclude check scripts) options.
Version: 20.03.20
  • Update to check script checkpoodle.sh to avoid generating an error when port 443 is used for something else than HTTPS.
Version: 20.01.27
  • New check script checkhomeroot.sh to check the root home directory.
  • Update to check script checkall.sh to set a default for the output width in case stty -a reports 0 colums - which may happen on the console of a system.
Version: 20.01.26
  • Update to check script checkall.sh to require sendmail to be installed before running checkall.sh, which is no longer included by default on RHEL 8, but is however still available for installation.
  • Update to check script checksendmail.sh to alert if RPM package sendmail has not been installed.
Version: 20.01.24
  • Update to check script checkall.sh to correct a typo.
Version: 20.01.22
  • Update to check script checkall.sh to ensure that the output of virt-what is printed correctly on oVirt.
  • Update to check script checkvm.sh to ensure that the output of virt-what is printed correctly on oVirt.
Version: 20.01.18
  • Update to check script checkcleansshdir.sh to avoid reporting file known_hosts.old as a file to be removed.
Version: 20.01.08
  • Update to check script checkbusydisks.sh to avoid reporting both disks and device mapper devices.
  • Update to check script checklsblka.sh to include additional columns that show more information about available block devices on the system.
Version: 20.01.02
  • Update to check script checkbusydisks.sh to correctly report disk utilization when disks are busy.
Version: 19.12.28
  • Update to check script checkexports.sh to exclude entries in /etc/exports that are commented out.
Version: 19.12.23
  • Update to check script checkall.sh to include the BIOS vesion and the BIOS release date in the system configuration section.
  • New check script checkbios.sh to display the installed BIOS version and the BIOS release date.
Version: 19.12.21
  • Update to check script checktemperature.sh to improve the output generated by the script.
Version: 19.12.20
  • New check script checktemperature.sh to check the temperature of the system.
Version: 19.12.19
  • Update to check script checkrpmv.sh to no longer report file mode differences on the /sys folder as suggested by rpm -Va.
  • Update to check script checkntpdate.sh to account for a different format of output of the ntpdate command on Oracle Linux 6.10.
Version: 19.12.14
  • New check script checkcryptoutils.sh to check if the crypto-utils package has been installed.
Version: 19.12.12
  • Update to check script checkemcinq.sh to ensure the script doesn't hang when there is a faulty fibre channel adapter.
Version: 19.12.09
  • Update to check script checkcrontabcommandsexec.sh to avoid reporting an error if a command within a crontab file starts with a non-alphanumeric character.
Version: 19.11.21
  • Update to check script checksplunkthpdisabled.sh to ensure it works correctly in case RHEL versions 7 or higher are used.
Version: 19.11.13
  • New check script checkirqbalance.sh to check if the irqbalance RPM is installed.
Version: 19.11.11
  • Functionality of UNIX Health Check for RHEL 8.1 validated.
  • Update to check script checketchosts.sh to recommend using DNS when there are many entries in /etc/hosts.
Version: 19.11.06
  • Update to check script checkrpmqahistory.sh to ensure all entries are printed on individual lines.
  • Update to check script checkrpmqa.sh to ensure the output is printed correctly.
Version: 19.10.24
  • Update to check script checkrpmv.sh to exclude an additional item for Mozilla Firefox.
Version: 19.10.23
  • Update to check script checkcrontabs.sh to improve excluding the root user from the list of users to check.
  • Update to check script checksudoersusers.sh to exclude netgroups (starting with a plus sign) in /etc/sudoers.
Version: 19.10.22
  • New check script checketchostsnohostname.sh to check for entries in /etc/hosts that only list the IP address, and no hostname.
  • New check script checketchostsvsdns.sh to check for entries in /etc/hosts that are also known in DNS.
  • New check script checketchostsequiv.sh to check if there are NO entries in /etc/hosts.equiv.
  • New check script checketchostsduplicates.sh to check for more than 1 entry in /etc/hosts for the hostname.
  • New check script checketchostscharacters.sh to check for any non alpha-numeric characters in /etc/hosts.
  • New check script checketchostsdups.sh to list any duplicate entries in the /etc/hosts file.
  • New check script checketchostsfile.sh to display the contents of the /etc/hosts file.
Version: 19.10.18
  • Update to check script checkrpmqahistory.sh to correctly display the list of installed RPM packages.
  • Update to check script checksudoprivilegeescalation.sh to avoid running it on CentOS and RHEL 8, as the script is not designed for these systems.
  • Update to the description of check script checksharutils.sh to explain how to enable the PowerTools repo for CentOS 8.0, before installing the sharutils package.
  • Update to check script checkyumutils.sh to ensure it works properly for CentOS 8.0.
  • Update to the description of check script checkrsyslogforwarding.sh to explain that the rsyslog daemon needs to be restarted after updating the configuration file(s) for rsyslog.
Version: 19.10.13
  • Update to check script checkoslevel.sh to recommend version 8.0 of CentOS.
  • Update to check script checkneedsrestarting.sh to correct a typo in the dnf command.
  • Update to check script checkcleanetcssh.sh to avoid reporting the /etc/ssh_config.d directory.
  • Update to check script checkvarlogbtmpperms.sh to adjust the script for CentOS 8.0.
  • Update to check script checketchostsallow.sh to adjust the script for CentOS 8.0.
  • Update to check script checketchostsallowperms.sh to adjust the script for CentOS 8.0.
  • Update to check script checketchostsdeny.sh to adjust the script for CentOS 8.0.
  • Update to check script checketchostsdenyperms.sh to adjust the script for CentOS 8.0.
  • Update to check script checklastlogperms.sh to adjust the script for CentOS 8.0.
  • Update to check script checkl1tf.sh to adjust the script for CentOS 8.0.
Version: 19.10.12
  • Update to check script checkvim.sh to print out the recommended version of vim to use.
  • Update to check script checkyumconfperms.sh to adjust the script for CentOS 8.0.
Version: 19.09.18
  • Update to check script checkoslevel.sh to recommend level 7.7.1908 (Core) of CentOS to be installed.
  • Update to check script checkcleanetc.sh to exclude any files with the .rpmnew extension from being reported.
Version: 19.09.05
  • Update to check script checkoslevel.sh to recommend version 7.7 of Red Hat Enterprise Linux, Oracle Linux and Scientific Linux.
Version: 19.09.04
  • Update to check script checkswapminsize.sh to add a missing word in the output.
Version: 19.08.09
  • New check script checkiotop.sh to check if the iotop package has been installed.
  • New check script checkcrashkernel.sh to check for the crashkernel entry in /etc/default/grub.
  • New check script checkcrash.sh to check for any kernel dumps present on the system.
  • New check script checkkdumpctl.sh to check that the kdumpctl status command says that kdump is operational.
  • New check script checketckdumpconfperms.sh to check the permissions, owner and group of /etc/kdump.conf.
  • New check script checkkdump.sh to check that the kdump daemon is both started and enabled at system boot.
Version: 19.08.01
  • Update to check script checkcleansystem.sh to remove checking folder /var/tmp, as that folder is already checked through check script checkvartmp.sh.
Version: 19.07.25
  • New check script checkext2.sh to check for any ext2 file systems on the system.
  • New check script checklostfoundsize.sh to check the size of the lost+found subfolders for XFS file systems.
Version: 19.07.23
  • New check script checkmcelog.sh to check if mcelog reports any machine check exceptions (hardware errors).
  • New check script checksystemctllistjobs.sh to check for any systemd unit jobs still running as listed by the systemctl list-jobs command.
  • New check script checkgrub2cfg.sh to check if the GRUB2 configuration file /boot/grub2/grub.cfg has valid contents.
  • New check script checkaudit.sh to check that the audit daemon is both started and enabled at system boot.
  • New check script checkauditrules.sh to check that rules are indeed defined for the audit system.
  • New check script checkauditperms.sh to check if the permissions of the /etc/audit folder are correctly set.
Version: 19.07.18
  • New check script checkpermitemptypasswords.sh to check if the PermitEmptyPasswords entry in /etc/ssh/sshd_config is either commented out or set to no.
  • New check script checksshpubkeyauthentication.sh to check if the PubkeyAuthentication entry in /etc/ssh/sshd_config is either commented out or set to yes.
  • New check script checksshhostbasedauthentication.sh to check if the HostBasedAuthentication entry in /etc/ssh/sshd_config is either commented out or set to no.
  • New check script checksshignorerhosts.sh to check if the IgnoreRhosts entry in /etc/ssh/sshd_config is either commented out or set to yes.
  • New check script checksshmaxauthtries.sh to check if the MaxAuthTries entry in /etc/ssh/sshd_config is either commented out or set within the range 3 to 6.
  • Update to check script checkctrlaltdel.sh to also include a check for the Systemd target ctrl-alt-del, to ensure it is disabled.
  • Update to check script checkvim.sh to also display the recommended version of Vim to be upgraded to.
Version: 19.07.17
  • New check script checketcsecurettyperms.sh to check the permissions of /etc/securetty.
  • Update to check script checketcmotdperms.sh to also check the permissions of folder /etc/motd.d on a RHEL 8 system.
  • New check script checkcleanetcssh.sh to check for any files in /etc/ssh that can be cleaned up.
  • New check script checksshbanner.sh to check the Banner entry in sshd_config.
  • New check script checkpuppetconf.sh to check the configuration of the Puppet agent.
  • New check script checkpuppetconfperms.sh to check the permissions of /etc/puppet/puppet.conf.
  • New check script checkpuppetenabled.sh to check if the Puppet agent is enabled to start at boot.
  • New check script checkpuppetactive.sh to check if the Puppet agent is running.
Version: 19.07.16
  • New check script checksplunkenabled.sh to check if the Splunk forwarder agent is enabled to start at boot.
  • New check script checksplunkactive.sh to check if the Splunk forwarding agent is active.
  • Update to check script checketchostsnonnumeric.sh to correct an issue with checking the correct IP address format, as awk acts differently on RHEL 6, compared to RHEL 7 and RHEL 8.
  • New check script checkrsyslogforwarding.sh to check if the rsyslog messages are forwarded to a central logging server.