Re: gpm dumping info to /var/log/messages

2014-01-12 Thread Kailash Kalyani

On Wednesday 08 January 2014 01:17 PM, Mike McClain wrote:

Is there any way to stop gpm from dumping to /var/log/messages every
time I copy/paste without stopping other deamons from writing info
there too? I see no such provisions in the man pages.
Thanks,
Mike
--
Who knows what evil lurks in the hearts of men?



Hi Mike,

You should look at the manpage and documentation of rsyslog.conf

if you want to discard messages from gpm you could add a line in the 
RULES section which goes

#this discards all messages from gpm
gpm.*   ~

HTH,
Kailash


--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Archive: http://lists.debian.org/52d397a5.5080...@gmail.com



Re: Daisy player applications that did not go out with the ark :-(

2014-01-12 Thread Kailash Kalyani

On Saturday 11 January 2014 11:58 PM, Lisi Reisz wrote:

I have two separate but related problems.

1. I can find no up to date daisy playing software that will run on
Linux.  Suggestions, please?


Hi Lisi,

I'm not clear on which use-cases you're looking at. Have you looked at 
the following?

1. Emerson Reader: http://code.google.com/p/emerson-reader/
2. Daisy Book Reader: http://sourceforge.net/projects/dbr/

Sincerely,
Kailash




--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Archive: http://lists.debian.org/52d38c09.8040...@gmail.com



Re: Question

2014-01-12 Thread Bob Bernstein

On Sun, 12 Jan 2014, Jeff Bauer wrote:

NEVER trust a post made by someone whose surname rhymes with 
"hemorrhoid."


Strange you should mention that, since an alternate spelling of the 
name in question is "Murgatroid."


Oh well.

--
IMPORTANT: This email is intended for the use of the individual
addressee(s) named above and may contain information that is
confidential, privileged or unsuitable for overly sensitive
persons with low self-esteem, no sense of humour or irrational
metaphysical beliefs.


--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Archive: 
http://lists.debian.org/Pine.LNX.4.64.1401121935180.6232@gebyyobl.ybpnyqbznva



Re: Question

2014-01-12 Thread Jeff Bauer

On 01/12/2014 04:44 PM, Bob Bernstein wrote:

On Sun, 12 Jan 2014, Cameron Murgatroyd wrote:

Hi I've recently become a frequent user of debian and I have a 
question [...]


I love the internet. Consider where this post took me:

http://en.wikipedia.org/wiki/Murgatroyd

Fabulous stuff. Simply fabulous.




NEVER trust a post made by someone whose surname rhymes with "hemorrhoid."


--
hangout: ##b0rked on irc.freenode.net
diversion: http://alienjeff.net - visit The Fringe
quote: "The foundation of authority is based upon the consent of the people." - 
Thomas Hooker


--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Archive: http://lists.debian.org/52d32eff.3050...@charter.net



Re: Install-time non-free issues

2014-01-12 Thread Scott Ferguson
On 13/01/14 04:38, tty7 wrote:
> Hello, I've attempted to install non-free firmware several times with
> wheezy amd64. I've tried placing the *.deb* package

Emphasis is mine.

> on / and on /firmware/ of both an SD card and a USB stick. I've
> extracted the files and placed the loose files it calls for by name
> (rtl_nic/etc) in both / and /firmware on both the SD card and USB
> stick.
> 
> In short, I've followed with the documentation says to do, yet the
> installer does not seem to "find" the files.

Which documentation is that.

> 
> I've switched to tty2 (Ctrl-Alt-F2) and activated it, and created
> /mnt/sdcard and /mnt/usb and mounted both filesystems, and verified
> that the firmware exists in both places on both devices. The
> installer can't seem to "find" it even with them manually mounted.
> 
> 
> Is there some other place the installer is looking? there appears to
> be no way to specify a mountpoint or location to find these files.
> 
> Anyone got a clue? I'm tapped out..
> 
> 
> Thanks!

It reads like you are using not using the non-free-firmware version of
the installer *and* you are trying to add the firmware-linux-free-*.deb
to the installation process - if that's the case skip to the last two
paragraphs.

If you've already installed Debian *and* down-loaded the non-free
firmware image but for some reason don't wish to use apt/aptitude:-
# dpkg -i $pathTo\firmware-linux-free-*.deb

(replace $pathTo with actual path to the package, you can leave the
wildcard in the debian package name)

If you've already installed Debian and you can use apt:-
# apt-get install firmware-linux-free


If you have *not* already installed Debian you need to use the files
from either the
*.tar.gz* or the *.zip* package. I'm not familiar with the process of
trying to manually extract the drivers from the .deb package.

Those packages are here:-
http://cdimage.debian.org/cdimage/unofficial/non-free/firmware/wheezy/current/
See 6.4.1. Preparing a medium:-
https://www.debian.org/releases/wheezy/i386/ch06s04.html.en


Kind regards


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/52d3141e.7050...@gmail.com



Re: Question

2014-01-12 Thread Bob Bernstein

On Sun, 12 Jan 2014, Cameron Murgatroyd wrote:

Hi I've recently become a frequent user of debian and I have a 
question [...]


I love the internet. Consider where this post took me:

http://en.wikipedia.org/wiki/Murgatroyd


Fabulous stuff. Simply fabulous.


--
IMPORTANT: This email is intended for the use of the individual
addressee(s) named above and may contain information that is
confidential, privileged or unsuitable for overly sensitive
persons with low self-esteem, no sense of humour or irrational
metaphysical beliefs.


--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Archive: 
http://lists.debian.org/Pine.LNX.4.64.1401121636460.6232@gebyyobl.ybpnyqbznva



Re: Question

2014-01-12 Thread Stan Hoeppner
On 1/12/2014 1:25 PM, Cameron Murgatroyd wrote:
> Hi I've recently become a frequent user of debian and I have a question if
> I were to want to make a .deb package for a game hack and to do it I needed
> to delete some files from the users file system before my files go in how
> would I do it?

The first thing you need to do is post exactly what you're trying to
accomplish, in detail.  Lots and lots of detail.


-- 
Stan


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/52d2fd05.6040...@hardwarefreak.com



Re: Question

2014-01-12 Thread Doug

On 01/12/2014 02:25 PM, Cameron Murgatroyd wrote:
Hi I've recently become a frequent user of debian and I have a 
question if I were to want to make a .deb package for a game hack and 
to do it I needed to delete some files from the users file system 
before my files go in how would I do it? 
If I were looking at a program that required the removal of some files 
from my system, I would stop looking at that program! I'd bet that most 
other

people would do likewise!

--doug


--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Archive: http://lists.debian.org/52d2f7b1.6060...@optonline.net



Re: Question

2014-01-12 Thread Brian
On Sun 12 Jan 2014 at 19:25:14 +, Cameron Murgatroyd wrote:

> Hi I've recently become a frequent user of debian and I have a question if
> I were to want to make a .deb package for a game hack and to do it I needed
> to delete some files from the users file system before my files go in how
> would I do it?

I'm a little unsure what you mean by "the users file system". Do you
mean the home directory? And what *exactly* is it you want to delete?


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
http://lists.debian.org/12012014194530.9cd3faed4...@desktop.copernicus.demon.co.uk



Question

2014-01-12 Thread Cameron Murgatroyd
Hi I've recently become a frequent user of debian and I have a question if
I were to want to make a .deb package for a game hack and to do it I needed
to delete some files from the users file system before my files go in how
would I do it?


Re: Install-time non-free issues

2014-01-12 Thread Brian
On Sun 12 Jan 2014 at 12:38:21 -0500, tty7 wrote:

> Anyone got a clue? I'm tapped out..

You appear to have done everything correctly but my brain is not in gear
yet :) so, avoiding any debugging process, try this to get you going:

After installing the base system switch to tty2 and

   mkdir /lib/firmware

Then mount the device which holds the firmware files (the files
themselves, not a .deb) and transfer them to /lib/firmware.

Proceed with the installation.


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/20140112184401.ga3...@copernicus.demon.co.uk



Re: Install-time non-free issues

2014-01-12 Thread Brad Rogers
On Sun, 12 Jan 2014 12:38:21 -0500
tty7  wrote:

Hello tty7,

>Anyone got a clue? I'm tapped out..

You shouldn't need to d/l and unpack a .deb locally.  Add non-free to
the reos in your sources.list file, update the repo databases, and then
search for, and install, the package(s) you require.

-- 
 Regards  _
 / )   "The blindingly obvious is
/ _)radnever immediately apparent"
Where the grass is green and the girls are pretty
Paradise City - Guns 'N' Roses


signature.asc
Description: PGP signature


Install-time non-free issues

2014-01-12 Thread tty7
Hello,
I've attempted to install non-free firmware several times with wheezy amd64.
I've tried placing the .deb package on / and on /firmware/ of both an SD card 
and a USB stick.
I've extracted the files and placed the loose files it calls for by name 
(rtl_nic/etc) in both / and /firmware on both the SD card and USB stick.

In short, I've followed with the documentation says to do, yet the installer 
does not seem to "find" the files.

I've switched to tty2 (Ctrl-Alt-F2) and activated it, and created /mnt/sdcard 
and /mnt/usb and mounted both filesystems, and verified that the firmware 
exists in both places on both devices. The installer can't seem to "find" it 
even with them manually mounted.


Is there some other place the installer is looking? there appears to be no way 
to specify a mountpoint or location to find these files.

Anyone got a clue? I'm tapped out..


Thanks!

--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/ecc021dc-2d78-47f0-992f-83170798a...@tty7.org



Re: PXE install, without internet?

2014-01-12 Thread Anubhav Yadav
> I suspect apt-cacher-ng is the best long-term solution for the OP or I'd
> have suggested just adding the entire DVD repo. to the TFTP directory
> used by PXE.

Still I'll be trying both! Never bad to learn anything new! Thanks again! :)


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
http://lists.debian.org/CA+Jf9AHwD=ar+vw5unqxv429+yctma8xkmxlbtwazmxb5xi...@mail.gmail.com



Re: Re: PXE install, without internet?

2014-01-12 Thread Anubhav Yadav
One of the most user friendly lists you'll find! :)


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
http://lists.debian.org/ca+jf9agkqgv1+d6vnkvgcxgroxk-_5xpz9rpvo21+g1_vg0...@mail.gmail.com



Re: Intel soundcard does not work

2014-01-12 Thread steef



 Origineel bericht 


Hello,
I have new computer but soundcard does not work with Debian/Squeeze.
Maybe I need to tweak some configuration files or I need new driver?
It is integrated on motherboard Intel soundcard.
Can anybody give me an advice?

Bellow are output from some command that I tought would be needed.
BTW soudcard works under Windows.

If anybody is wondering why I use Squeeze instead of something more
recent it is because I do have complete set of DVD for Squeeze but do
not have internet connection capable for online installation of OS or
even easy acces to set of DVD for newer system.

boza@spongia:~/tmp$ lspci -n
00:1b.0 0403: 8086:1c20 (rev 05)

boza@spongia:~/tmp$ lspci -v
00:1b.0 Audio device: Intel Corporation Cougar Point High Definition Audio 
Controller (rev 05)
 Subsystem: Giga-byte Technology Device a002
 Flags: bus master, fast devsel, latency 0, IRQ 22
 Memory at f7d0 (64-bit, non-prefetchable) [size=16K]
 Capabilities: 
 Kernel driver in use: HDA Intel
  ]
boza@spongia:~/tmp$ groups
boza cdrom floppy audio dip video plugdev netdev bluetooth scanner

boza@spongia:~/tmp$ lsmod
Module  Size  Used by
parport_pc 18855  0
ppdev   5030  0
lp  7462  0
parport27682  3 parport_pc,ppdev,lp
binfmt_misc 6399  1
kvm_intel  38146  0
kvm   213960  1 kvm_intel
fuse   50417  1
nls_utf81208  3
nls_cp437   5817  3
vfat7836  3
fat39990  1 vfat
loop   11623  0
snd_hda_codec_realtek   235122  1
snd_hda_intel  20019  1
snd_hda_codec  53892  2 snd_hda_codec_realtek,snd_hda_intel
snd_hwdep   5220  1 snd_hda_codec
snd_pcm_oss32415  0
snd_mixer_oss  12478  2 snd_pcm_oss
snd_pcm60151  3 snd_hda_intel,snd_hda_codec,snd_pcm_oss
snd_seq_midi4256  0
snd_rawmidi15323  1 snd_seq_midi
snd_seq_midi_event  4628  1 snd_seq_midi
snd_seq41281  2 snd_seq_midi,snd_seq_midi_event
button  4650  0
i2c_i8017750  0
i2c_core   15328  1 i2c_i801
snd_timer  15486  2 snd_pcm,snd_seq
snd_seq_device  4493  3 snd_seq_midi,snd_rawmidi,snd_seq
snd45918  11 
snd_hda_codec_realtek,snd_hda_intel,snd_hda_codec,snd_hwdep,snd_pcm_oss,snd_mixer_oss,snd_pcm,snd_rawmidi,snd_seq,snd_timer,snd_seq_device
soundcore   4566  2 snd
snd_page_alloc  6217  2 snd_hda_intel,snd_pcm
processor  29871  2
video  17349  0
output  1692  1 video
pcspkr  1699  0
evdev   7352  8
psmouse49777  0
serio_raw   3752  0
ext3  106326  3
jbd36861  1 ext3
mbcache 5050  1 ext3
sg 18632  0
usb_storage39513  1
sd_mod 29649  9
crc_t10dif  1276  1 sd_mod
sr_mod 12250  0
cdrom  28631  1 sr_mod
ata_generic 3047  0
fan 3346  0
ehci_hcd   31135  0
ata_piix   21124  6
r8169  29213  0
thermal11610  0
mii 3210  1 r8169
thermal_sys11942  4 processor,video,fan,thermal
libata133120  2 ata_generic,ata_piix
scsi_mod  121765  5 sg,usb_storage,sd_mod,sr_mod,libata
usbcore   121762  3 usb_storage,ehci_hcd
nls_base6377  5 nls_utf8,nls_cp437,vfat,fat,usbcore





hi,

the alsa kernel module hda-intel is loaded. did your machine/pr. load alsa-utils? if yes: try the konsole-command alsamixer and look if the output is 
muted. if so: put it on: put it on.

\
reg.,

steef


--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Archive: http://lists.debian.org/52d29016.2030...@home.nl



Intel soundcard does not work

2014-01-12 Thread Martin
Hello,
I have new computer but soundcard does not work with Debian/Squeeze.
Maybe I need to tweak some configuration files or I need new driver?
It is integrated on motherboard Intel soundcard.
Can anybody give me an advice?

Bellow are output from some command that I tought would be needed.
BTW soudcard works under Windows.

If anybody is wondering why I use Squeeze instead of something more
recent it is because I do have complete set of DVD for Squeeze but do
not have internet connection capable for online installation of OS or
even easy acces to set of DVD for newer system.

boza@spongia:~/tmp$ lspci -n
00:1b.0 0403: 8086:1c20 (rev 05)

boza@spongia:~/tmp$ lspci -v
00:1b.0 Audio device: Intel Corporation Cougar Point High Definition Audio 
Controller (rev 05)
Subsystem: Giga-byte Technology Device a002
Flags: bus master, fast devsel, latency 0, IRQ 22
Memory at f7d0 (64-bit, non-prefetchable) [size=16K]
Capabilities: 
Kernel driver in use: HDA Intel
 ]
boza@spongia:~/tmp$ groups
boza cdrom floppy audio dip video plugdev netdev bluetooth scanner

boza@spongia:~/tmp$ lsmod
Module  Size  Used by
parport_pc 18855  0 
ppdev   5030  0 
lp  7462  0 
parport27682  3 parport_pc,ppdev,lp
binfmt_misc 6399  1 
kvm_intel  38146  0 
kvm   213960  1 kvm_intel
fuse   50417  1 
nls_utf81208  3 
nls_cp437   5817  3 
vfat7836  3 
fat39990  1 vfat
loop   11623  0 
snd_hda_codec_realtek   235122  1 
snd_hda_intel  20019  1 
snd_hda_codec  53892  2 snd_hda_codec_realtek,snd_hda_intel
snd_hwdep   5220  1 snd_hda_codec
snd_pcm_oss32415  0 
snd_mixer_oss  12478  2 snd_pcm_oss
snd_pcm60151  3 snd_hda_intel,snd_hda_codec,snd_pcm_oss
snd_seq_midi4256  0 
snd_rawmidi15323  1 snd_seq_midi
snd_seq_midi_event  4628  1 snd_seq_midi
snd_seq41281  2 snd_seq_midi,snd_seq_midi_event
button  4650  0 
i2c_i8017750  0 
i2c_core   15328  1 i2c_i801
snd_timer  15486  2 snd_pcm,snd_seq
snd_seq_device  4493  3 snd_seq_midi,snd_rawmidi,snd_seq
snd45918  11 
snd_hda_codec_realtek,snd_hda_intel,snd_hda_codec,snd_hwdep,snd_pcm_oss,snd_mixer_oss,snd_pcm,snd_rawmidi,snd_seq,snd_timer,snd_seq_device
soundcore   4566  2 snd
snd_page_alloc  6217  2 snd_hda_intel,snd_pcm
processor  29871  2 
video  17349  0 
output  1692  1 video
pcspkr  1699  0 
evdev   7352  8 
psmouse49777  0 
serio_raw   3752  0 
ext3  106326  3 
jbd36861  1 ext3
mbcache 5050  1 ext3
sg 18632  0 
usb_storage39513  1 
sd_mod 29649  9 
crc_t10dif  1276  1 sd_mod
sr_mod 12250  0 
cdrom  28631  1 sr_mod
ata_generic 3047  0 
fan 3346  0 
ehci_hcd   31135  0 
ata_piix   21124  6 
r8169  29213  0 
thermal11610  0 
mii 3210  1 r8169
thermal_sys11942  4 processor,video,fan,thermal
libata133120  2 ata_generic,ata_piix
scsi_mod  121765  5 sg,usb_storage,sd_mod,sr_mod,libata
usbcore   121762  3 usb_storage,ehci_hcd
nls_base6377  5 nls_utf8,nls_cp437,vfat,fat,usbcore


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/20140112105431.GA2572@alfa



Re: PCI compliance

2014-01-12 Thread Scott Ferguson
On 12/01/14 20:00, Veljko wrote:
> On 2014-Jan-11 10:45, Scott Ferguson wrote:
>> On 11/01/14 03:46, Veljko wrote:
>>> Hello,
>>>
>>> Does anyone here operates servers that have to meet PCI standards?
>>
>>



>  
>> I have little recent experience with CentOS/RedHat so I can't speculate
>> on parallels.
> 
> Well, it's the same, I guess. They too use old stable software patched to
> answer to new vulnerabilities.

I don't know the RedHat philosophy, but Debian will not hide
vulnerabilities - even for a minute, they also tend to patch very fast.
The main reasons Debian dominates the top end of the server usage (IMO).


>>
>> Start with client and company data, then the network and OS (plural),
>> after that the firewall. You'll find that apache is the very last thing
>> you need to worry about.
> 
> I maintained for a while some website that accepted payments. There I had some
> problems with older versions of Apache, PHP and openssl. Network scanning
> company soon accepted my appeals but the fact that I had to track down all
> those CVEs proves that there was something wrong with their process. But, to
> be honest, I didn't filled SAQ, it was done before I took maintenance, so
> that could be the source of the problem.

Most likely even if the SAQ was properly done the system has changed. If
there is no change control or it's not properly enforced (only change if
the reason is compelling *and* it's been tested); or if security is
something that relies upon people following rules rather than enforced
by the system then you're probably dealing with a typical client.
Not a position I'd envy being in.

Sometimes the client needs to understand that the potential impact of a
breach is of greater importance than the perceived risk.

*cough*Kmart*cough*



Take care


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/52d263d9.6030...@gmail.com



Re: Installing Mahara from source on Debian SID.

2014-01-12 Thread Csanyi Pal
Hi Selim,

"Selim T. Erdogan"  writes:

> Csanyi Pal, 11.01.2014:
>> 
>> 6.
>> Mahara Configuration
>> 
>> cd /usr/share/mahara/htdocs/
>> sudo cp config-dist.php config.php
>> sudo nano config.php
>> 
>> 
>> $cfg = new stdClass();
>
> Here you have "$cfg = new stdClass();"
>
>> 
>> $cfg->dbtype   = 'postgres';
>> $cfg->dbhost   = 'localhost';
>> $cfg->dbport   = null;
>> $cfg->dbname   = 'mahara';
>> $cfg->dbuser   = 'mahara';
>> $cfg->dbpass   = 'SecretPassword';
>> 
>> $cfg->dbprefix = '';
>> 
>> $cfg = new stdClass();
>
> I don't know about any of this software you're trying to set up... but 
> is this second copy of "$cfg = new stdClass();" supposed to be here?

No, indeed, and I removed this second copy from here.

Still get the error as before.

Maybe the PostgreSQL version 9.2, that I have installed is not
appropriate for mahara, because I read in the 
/usr/share/mahara/htdocs/init.php

the following lines ( from 137 to 142 ):

// Now we have a connection, verify the server is a new enough
version
$dbversion = $db->ServerInfo();
if (is_postgres()) {
$okversion = '8.3';
$dbfriendlyname = 'PostgreSQL';
}

So, my version of the installed PostgreSQL is 9.2, but for the init.php
it should be version 8.3?

No, I think not, because when I change the line

$okversion = '8.3';

to

$okversion >= '8.3';

and try to refresh the localhost/mahara site, I get the same error.

-- 
Regards from Pal


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/874n59sh3z@gmail.com



Re: PCI compliance

2014-01-12 Thread Veljko
On 2014-Jan-11 10:45, Scott Ferguson wrote:
> On 11/01/14 03:46, Veljko wrote:
> > Hello,
> > 
> > Does anyone here operates servers that have to meet PCI standards?
> 
> 
> Level 4s (isolated payment solutions)
> 
> This is possibly not the best list to ask on
> 
> > Do you have
> > any problems with Debian?
> 
> No.
> 
> > I know that Moneris Solutions and Trustkeeper are
> > scanning for version numbers so if you're running some old Apache version 
> > for
> > example, you need to track down every vulnerability (CVE) and to prove that
> > particular CentOS/RedHat version is patched.
> 
> That's what the ASV is supposed to do, if you do the SAQ first (as
> PCISSC requires) the scan shouldn't result in surprises.
> 
> I have no experience with either of those companies. I don't run
> out-of-date un-patched software.Either Debian stable or, mostly,
> old-stable (Squeeze).

I also don't run out-of-date software. I was just curious if you had problems
because you run old, but patched version, not the latest one. That answered to
my question.
 
> I have little recent experience with CentOS/RedHat so I can't speculate
> on parallels.

Well, it's the same, I guess. They too use old stable software patched to
answer to new vulnerabilities.

> > What is your experience with this?
> 
> 
> That's a *very* broad subject.
> 
> Speak to the bank before choosing your ASV and payment solution.
> 
> Start with client and company data, then the network and OS (plural),
> after that the firewall. You'll find that apache is the very last thing
> you need to worry about.

I maintained for a while some website that accepted payments. There I had some
problems with older versions of Apache, PHP and openssl. Network scanning
company soon accepted my appeals but the fact that I had to track down all
those CVEs proves that there was something wrong with their process. But, to
be honest, I didn't filled SAQ, it was done before I took maintenance, so
that could be the source of the problem.

> Anything above a 4 and you should consider using specialists or
> outsourcing components (firewall, backups, and *especially*, mail) -
> look at Debian.org consultants list. Try CERT people if you can't find
> an experienced debian consultant. Compliance can be costly and time
> consuming so if you only want a Level 4 using a provider instead might
> be worthwhile unless you control (or outsource) *every* part of the
> chain *and* the client/business makes it profitable.
> 
> Subscribe to the security-announce mailing list:-
> http://lists.debian.org/debian-security-announce/
> 
> There's also a feed:-
> http://www.debian.org/security/dsa
> 
> (DSA==Debian Security Announcement, compatible with CVEs.)
> 
> Product and advice liability insurance is a good idea if you're
> supplying the service to a client.
> 
> If you don't control the whole data chain and the client thinks a CRM is
> the end-all-and-be-all run like hell. Assessment tends to rank
> external access as the greatest risk, in reality it's generally internal.
> 
> Kind regards and good luck


Thanks very much for your thoughts and advices, much appreciated. 

Regards,
Veljko


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/20140112090012.ga5...@angelina.example.com