isCChost Command

Purpose

Determine the Common Criteria enabled status of a system.

Syntax

isCChost [ -i | -s ]

Description

The isCChost command returns the configuration status of the host machine. If the host has been configured to operate in Common Criteria enabled mode, the command exits with a zero (true) code. If the host has not been configured to operate in Common Criteria enabled mode, the command exits with a non-zero (false) code.

This command may be used in shell scripts where the security status of the host must be known.

The -i option is used to determine the installation status of the system. The Common Criteria enabled status of the system is determined by examining the ODM database, and the exit status indicates whether or not the system was installed in Common Criteria enabled mode.

The -s option is used to initialize AIX® in Common Criteria enabled mode and may only be issued by the root user. The Common Criteria enabled status of the system is determined by examining the ODM database. On a system that has not been installed with Common Criteria enabled, as indicated by the ODM, this option performs no operation.

Flags

Subcommands

Exit Status

0

When used with no options, the system has been initialized to operate in Common Criteria enabled mode. When used with the -s flag, the system was successfully initialized according to the Common Criteria enabled mode setting defined in the ODM database. When used with the -i flag, the system was installed with Common Criteria enabled enabled.

1

When used with no options, the system has not been initialized to operate in Common Criteria enabled mode. When used with the -s flag, the system could not be initialized to operate in the security mode that was defined in the ODM. When used with the -i flag, the system was installed with Common Criteria enabled but is not currently operating in Common Criteria enabled mode.

2

When used with the -s option, the isCChost command was executed by a non-root user. When used with the -i option, the system was not installed with Common Criteria enabled.

3

The isCChost command was executed with an invalid command line option.

Files