---
name: "checksecurity"
section: "8"
platform: "linux"
package: "checksecurity"
version: "2.0.18"
release: "Debian 13 (Trixie)"
platforms: ["linux"]
url: "https://new.carta.tech/checksecurity"
---

# checksecurity(8)

Run a collection of simple system checks

## NAME

checksecurity - Run a collection of simple system checks

## SYNOPSIS

**checksecurity**

## DESCRIPTION

The **checksecurity** command runs a small collection of simple system checks which are designed to catch a few common security issues. **checksecurity** is run by  **cron** in a daily basis.

## CONFIGURATION

The **checksecurity.conf** file defines several configuration variables: **MAILTO,** **CHECK\_DISKFREE**, **CHECK\_PASSWD** and  **CHECK\_SETUID** **LOGDIR**. Each is described below.

The checksecurity program works with a collection of plugins which are located in /usr/share/checksecurity and are configured individually by their own configuration file.

**CHECK\_PASSWD** If this is set to  **TRUE** then the check-passwd script will be invoked.  This script is designed to report upon system accounts which have no passwords. **CHECK\_DISKFREE** If this is set to **TRUE** then the check-diskfree script will be invoked and will allow an alert to be sent if there is any mounted partition is running short on disk space. **CHECK\_SETUID** If this is set to **TRUE** then the check-setuid script will be invoked, this will compare the setuid binaries upon the system to those that existed previously and show the differences.

## FILES

- */etc/checksecurity.conf*

  checksecurity configuration file

## SEE-ALSO

See also  [**check-diskfree**(8)](/check-diskfree/8.md), [**check-setuid**(8)](/check-setuid/8.md), [**check-passwd**(8)](/check-passwd/8.md) and **check-iptables-logs**(8)