Le 2012-09-18 12:36, Ed Flecko a écrit :
I have State and Federal regulators that want me to PROVE (since their
only used to looking at Micro$oft servers) my OBSD 5.1 server is up to
date, and there are no outstanding patches that need to be applied.
*I* know that's the case, because I follow the "patch" branch, but how
do I show (i.e., something I could print for them would be best) them
my system is up to date and that all patches have been applied???
Ask them what they would consider acceptable?
This is fuzzy stuff. They're not looking for a math-style proof. They
need to ensure you're following best practices. So ask them what they
want, then give it to them.
My two cents (Canadian)...
Simon
