wiki

AIX TE is like SELINUX, check for system and files integrity

TE will prevent you from updating your system, then you have to disable it, and enable at the end of upgrade.

[root@aix73]/root# getrunmode
System is currently in OPERATIONAL MODE.
[root@aix73]/root# getsecconf
OPERATIONAL MODE Security Flags
ROOT                      :    ENABLED
TRACEAUTH                 :   DISABLED

root@aixsrv1 - /root > for i in TE CHKEXEC CHKSHLIB
CHKSCRIPT CHKKERNEXT STOP_UNTRUSTD STOP_ON_CHKFAIL TEP TLP
TSD_FILES_LOCK TSD_LOCK
do
trustchk -p $i
done
TE=ON
CHKEXEC=ON
CHKSHLIB=ON
CHKSCRIPT=ON
CHKKERNEXT=ON
STOP_UNTRUSTD=OFF
STOP_ON_CHKFAIL=ON
TEP=OFF
TEP=/usr/bin:/usr/sbin:/etc:/bin:/sbin:/sbin/helpers/jfs2:/usr/lib/instl:/usr/ccs/bin:/usr/lib:/usr/lib/security
TLP=OFF
TLP=/usr/lib:/usr/ccs/lib:/lib:/var/lib
TSD_FILES_LOCK=OFF
TSD_LOCK=ON

root@aixsrv1 - /root > for i in TE CHKEXEC TEP TLP
do
trustchk -p $i=OFF
done

• trustchk -t ALL reports an error message for • /usr/ccs/lib/.recover/libc.a library. • • # trustchk -t ALL • trustchk: Verification of attributes failed: hash • Disable access to the file: /usr/ccs/lib/.recover/libc.a? • (y)es,(n)o,(i)gnore all errors : n • trustchk: Verification of stanza failed: • /usr/ccs/lib/.recover/libc.a

https://www.ibm.com/support/pages/aix-security-considerations-enabling-trusted-execution https://www.ibm.com/support/pages/node/630713 https://www.ibm.com/support/pages/node/6513320