Re: Security Updates

2008-01-17 Thread Dave Wade
--- Rob van der Heij <[EMAIL PROTECTED]> wrote: > On Jan 16, 2008 3:39 PM, Huegel, Thomas > <[EMAIL PROTECTED]> wrote: > > > I just can't let this go. > > Has anyone ever had some 'WINDOZE' auditor come in > and ask if you are > > up-to-date with your z/VM security patches from > IBM? > > Oh yes

Re: Security Updates

2008-01-16 Thread Alan Altmark
On Wednesday, 01/16/2008 at 01:48 EST, "McBride, Catherine" <[EMAIL PROTECTED]> wrote: > For a SOX audit I'd almost agree with you, as you bring up some valid points. > This was a PCI audit. The key difference that we've found between SOX and PCI > is that for SOX you create policy statement

Re: Security Updates

2008-01-16 Thread McBride, Catherine
alter his position. -Original Message- From: The IBM z/VM Operating System [mailto:[EMAIL PROTECTED] Behalf Of Alan Altmark Sent: Wednesday, January 16, 2008 12:15 PM To: IBMVM@LISTSERV.UARK.EDU Subject: Re: Security Updates

Re: Security Updates

2008-01-16 Thread Alan Altmark
On Wednesday, 01/16/2008 at 12:10 EST, "McBride, Catherine" <[EMAIL PROTECTED]> wrote: > Don't laugh, we know a guy who failed a PCI audit because the data traffic > moving between his LPAR's wasn't encrypted. No amount of convincing, > coercing, pleading or reasoning would change that audi

Re: Security Updates

2008-01-16 Thread McBride, Catherine
ystem [mailto:[EMAIL PROTECTED] Behalf Of Schuh, Richard Sent: Wednesday, January 16, 2008 11:03 AM To: IBMVM@LISTSERV.UARK.EDU Subject: Re: Security Updates Perfect sense, and it will be required by SOX 32. Then we will have to put firewalls between memory and the cpus Each cpu will have rules est

Re: Security Updates

2008-01-16 Thread Schuh, Richard
From: The IBM z/VM Operating System [mailto:[EMAIL PROTECTED] On Behalf Of Huegel, Thomas Sent: Wednesday, January 16, 2008 7:36 AM To: IBMVM@LISTSERV.UARK.EDU Subject: Re: Security Updates When you 'download' from z/OS to z/LINUX over a GU

Re: Security Updates

2008-01-16 Thread Gentry, Stephen
el, Thomas Sent: Wednesday, January 16, 2008 9:40 AM To: IBMVM@LISTSERV.UARK.EDU Subject: Security Updates I just can't let this go. Has anyone ever had some 'WINDOZE' auditor come in and ask if you are up-to-date with your z/VM security patches from IBM?

Re: Security Updates

2008-01-16 Thread Schuh, Richard
Huegel, Thomas Sent: Wednesday, January 16, 2008 6:40 AM To: IBMVM@LISTSERV.UARK.EDU Subject: Security Updates I just can't let this go. Has anyone ever had some 'WINDOZE' auditor come in and ask if you are up-to-date with you

Re: Security Updates

2008-01-16 Thread Stracka, James (GTI)
: Re: Security Updates On Wednesday, 01/16/2008 at 09:40 EST, "Huegel, Thomas" <[EMAIL PROTECTED]> wrote: > I just can't let this go. > Has anyone ever had some 'WINDOZE' auditor come in and ask if you are > up-to-date with your z/VM security patches from

Re: Security Updates

2008-01-16 Thread Alan Altmark
On Wednesday, 01/16/2008 at 09:40 EST, "Huegel, Thomas" <[EMAIL PROTECTED]> wrote: > I just can't let this go. > Has anyone ever had some 'WINDOZE' auditor come in and ask if you are > up-to-date with your z/VM security patches from IBM? In my experience talking to many customers, an auditor i

Re: Security Updates

2008-01-16 Thread Huegel, Thomas
V.UARK.EDU Subject: Re: Security Updates Here I keep correcting people who talk about downloading stuff from the mainframe (z/OS) to z/Linux. Brian Nielsen On Wed, 16 Jan 2008 09:46:18 -0500, Macioce, Larry <[EMAIL PROTECTED]> wrote: >I'll go one better... I can't get ma

Re: Security Updates

2008-01-16 Thread Brian Nielsen
Also fun is when they ask if your anti-virus software is up-to-date -- an d you tell them you don't run any. Brian Nielsen On Wed, 16 Jan 2008 08:51:46 -0600, Thomas Kern <[EMAIL PROTECTED]> wrote: >No, But I have had a 'security' auditor ask for a printout of my VM system's >/etc/passwd fi

Re: Security Updates

2008-01-16 Thread Brian Nielsen
Here I keep correcting people who talk about downloading stuff from the mainframe (z/OS) to z/Linux. Brian Nielsen On Wed, 16 Jan 2008 09:46:18 -0500, Macioce, Larry <[EMAIL PROTECTED]> wrote: >I'll go one better... I can't get management to stop calling z/VM... vmware. I correct them and

Re: Security Updates

2008-01-16 Thread Thomas Kern
No, But I have had a 'security' auditor ask for a printout of my VM syste m's /etc/passwd file. When he saw the censored copy of our USER DIRECT, he stopped asking questions. /Tom Kern On Wed, 16 Jan 2008 08:39:49 -0600, Huegel, Thomas <[EMAIL PROTECTED]> wr ote: >I just can't let this go. >Has a

Re: Security Updates

2008-01-16 Thread Macioce, Larry
On Behalf Of Huegel, Thomas Sent: Wednesday, January 16, 2008 9:40 AM To: IBMVM@LISTSERV.UARK.EDU Subject: Security Updates I just can't let this go. Has anyone ever had some 'WINDOZE' auditor come in and ask if you are up-to-date with your z/VM

Re: Security Updates

2008-01-16 Thread Rob van der Heij
On Jan 16, 2008 3:39 PM, Huegel, Thomas <[EMAIL PROTECTED]> wrote: > I just can't let this go. > Has anyone ever had some 'WINDOZE' auditor come in and ask if you are > up-to-date with your z/VM security patches from IBM? Oh yes... definitely in my previous job. And they're not used to folks who

Re: Security Updates

2008-01-16 Thread McBride, Catherine
LOL -Original Message- From: The IBM z/VM Operating System [mailto:[EMAIL PROTECTED] Behalf Of Huegel, Thomas Sent: Wednesday, January 16, 2008 8:40 AM To: IBMVM@LISTSERV.UARK.EDU Subject: Security Updates I just can't let this go. Has anyone ever had some &#x

Security Updates

2008-01-16 Thread Huegel, Thomas
I just can't let this go. Has anyone ever had some 'WINDOZE' auditor come in and ask if you are up-to-date with your z/VM security patches from IBM?