Re: PCI audit point for logs

Paul,

I was the iSeries SME and QSA on a Level 1 PCI assessment last fall and for
10.5 on the iSeries platform, we did cite that the QAUDJRN receivers could
not be altered.

Regards,

Steve

Steven W. Martinson, CISSP, CISM, CISA | Senior Consultant
SkyView Partners, Inc. | 25563 SE 41st Court | Issaquah, WA 98029
Phone: 425-458-4975 ext 712 | Fax: 425-657-0135 |
steve.martinson@xxxxxxxxxxxxxxxxxxx

message: 7
date: Fri, 22 Oct 2010 14:26:02 -0500
from: "John.BresinaJr" <John.BresinaJr@xxxxxxxxxx>
subject: RE: PCI audit point for logs

Paul,
When I did our PCI I thought 10.5 was the audit journal logs like QAUDJRN
and its journal receivers. If I remember right I ended up calling IBM and
getting a document from them that said the audit journals couldn't be edited
by users.

John Bresina Jr| Sr Engineer | TTS Server Tech Unix HQ/iSeries?| Target |?
33 S. 6th St.| Minneapolis, MN 55402 | 612 304 3665 (ph) |

-----Original Message-----
From: midrange-l-bounces@xxxxxxxxxxxx [mailto:
midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of Paul E. Fenstermacher
Sent: Friday, October 22, 2010 1:56 PM
To: MIDRANGE-L@xxxxxxxxxxxx
Subject: PCI audit point for logs

I need some opinions on PCI requirement 10.5 which refers to audit trail
logs. I take this to mean the history log on the iSeries and I can't
find any documentation that says it can't be altered. How have others
handled this requirement?



Paul Fenstermacher
Certified Specialist - i5 System Administration
Bass Pro Shops
417-873-5424 d
417-429-7694 c
paulf@xxxxxxxxxxx <mailto:paulf@xxxxxxxxxxx>



--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.



------------------------------

message: 8
date: Fri, 22 Oct 2010 14:43:37 -0500
from: David Gibbs <david@xxxxxxxxxxxx>
subject: COMMON 2011 Call For Presentations

Folks:

This just popped up on my calendar ... the Call For Presentations for the
2011 spring conference ends today.

Visit http://common.confex.com/common/s11/cfp.cgi to submit a session.

I've got my 2 additional sessions submitted

david

--
IBM i on Power Systems - For when you can't afford to be out of business


------------------------------

message: 9
date: Fri, 22 Oct 2010 16:17:53 -0400
from: "Pfleghaar, Brian" <BPfleghaar@xxxxxxxxxxxxxxxx>
subject: CPA3388 Attributes of file QSYSPRT not supported for device

The job is now going to a personal Office Jet instead of the networked
laser printer.

The spooled file is 198 char wide.

Printer model is an HP Officejet 6500 E709a

The printer is host based and a printer data stream of HPPCL3 GUI. I
understand this is unsupported, but I still want to see if any of you
have a suggestion.





Message . . . . : Attributes of file QSYSPRT not supported for device


&1. (C G T H I)




Cause . . . . . : Writer &1 found attributes of file QSYSPRT number 1

job 12345/abcdef/WWWWW created on system PLANO01 on 10/19/10 17:16:22
on

output queue &1 in library QUSRSYS that are not supported for device

&1. The error code, or codes, are 1. The error codes and their

meaning are as follows:


1 - Page size of file not supported on device.


2 - Device type of file not supported on device.


3 - Lines per inch (LPI) of file not supported on device.


4 - Special device requirements of file not supported on device.






Spooled File Attributes

Save file after written . . . . . . . : *YES

Device type . . . . . . . . . . . . . : PRINTER

Printer device type . . . . . . . . . : *SCS

Device file . . . . . . . . . . . . . : QSYSPRT

Library . . . . . . . . . . . . . . : ALTQSYS

Page size:

Length . . . . . . . . . . . . . . . : 66

Width . . . . . . . . . . . . . . . : 198

Measurement method . . . . . . . . . : *ROWCOL

Lines per inch . . . . . . . . . . . . : 6

Characters per inch . . . . . . . . . : 15

Overflow line number . . . . . . . . . : 60



Part of the Printer DEVD

Device description . . . . . . . > WYQUEVCP

Online at IPL . . . . . . . . . *NO

Font:

Identifier . . . . . . . . . . 011

Point size . . . . . . . . . . *NONE

Form feed . . . . . . . . . . . *AUTOCUT

Separator drawer . . . . . . . . *FILE

Separator program . . . . . . . *NONE

Library . . . . . . . . . . .

Printer error message . . . . . *INFO

Message queue . . . . . . . . . WYQUEVC

Library . . . . . . . . . . . QUSRSYS

Host print transform . . . . . . *NO

Manufacturer type and model . . *HP5SI

Paper source 1 . . . . . . . . . *LETTER

Paper source 2 . . . . . . . . . *NONE





Brian Pfleghaar





------------------------------

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) digest list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.



End of MIDRANGE-L Digest, Vol 9, Issue 1626
*******************************************