User Tools

Site Tools


aix:aix_trustexec

This is an old revision of the document!


AIX TE (Trust Execution)

AIX TE is like SELINUX, check for system and files integrity

TE will prevent you from updating your system, then you have to disable it, and enable at the end of upgrade.

List TE status:

root@aixsrv1 - /root > for i in TE CHKEXEC CHKSHLIB
CHKSCRIPT CHKKERNEXT STOP_UNTRUSTD STOP_ON_CHKFAIL TEP TLP
TSD_FILES_LOCK TSD_LOCK
do
trustchk -p $i
done
TE=ON
CHKEXEC=ON
CHKSHLIB=ON
CHKSCRIPT=ON
CHKKERNEXT=ON
STOP_UNTRUSTD=OFF
STOP_ON_CHKFAIL=ON
TEP=OFF
TEP=/usr/bin:/usr/sbin:/etc:/bin:/sbin:/sbin/helpers/jfs2:/usr/lib/instl:/usr/ccs/bin:/usr/lib:/usr/lib/security
TLP=OFF
TLP=/usr/lib:/usr/ccs/lib:/lib:/var/lib
TSD_FILES_LOCK=OFF
TSD_LOCK=ON

Disable CHKEXEC, TE, TEP, TLP to install AIX package:

root@aixsrv1 - /root > for i in TE CHKEXEC TEP TLP
do
trustchk -p $i=OFF
done
aix/aix_trustexec.1609532518.txt.gz · Last modified: 2021/01/01 21:21 by 127.0.0.1