Re: Debian PCI Question

2009-11-13 Thread Todd A. Jacobs
On Fri, Nov 13, 2009 at 10:59:34AM -0500, Matt McCants wrote: > Does anyone here have PCI audits being done on their Debian boxes? The I conduct (and remediate) PCI audits all the time. Your problem seems political, not technical. PCI requires that systems be patched, not that they are the latest

Re: Debian PCI Question

2009-11-13 Thread Florian Weimer
* Matt McCants: > Does anyone here have PCI audits being done on their Debian boxes? Yes, we hear about that from time to time. > The company I work for uses TrustKeeper and the one Debian box I've > managed to get my boss to allow keeps failing unjustly. Usually they > fail us due to version st

Debian PCI Question

2009-11-13 Thread Matt McCants
Greetings everyone! Does anyone here have PCI audits being done on their Debian boxes? The company I work for uses TrustKeeper and the one Debian box I've managed to get my boss to allow keeps failing unjustly. Usually they fail us due to version strings only (Saying anything less than the latest