RE: PCI audit point for logs

["John.BresinaJr" <John.BresinaJr@xxxxxxxxxx>]

Paul, 
When I did our PCI I thought 10.5 was the audit journal logs like QAUDJRN and its journal receivers.  If I remember right I ended up calling IBM and getting a document from them that said the audit journals couldn't be edited by users.

John Bresina Jr| Sr Engineer | TTS Server Tech Unix HQ/iSeries |  Target |  33 S. 6th St.| Minneapolis, MN 55402 | 612 304 3665 (ph) |

-----Original Message-----
From: midrange-l-bounces@xxxxxxxxxxxx [mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of Paul E. Fenstermacher
Sent: Friday, October 22, 2010 1:56 PM
To: MIDRANGE-L@xxxxxxxxxxxx
Subject: PCI audit point for logs

I need some opinions on PCI requirement 10.5 which refers to audit trail
logs.  I take this to mean the history log on the iSeries and I can't
find any documentation that says it can't be altered.  How have others
handled this requirement?  

 

Paul Fenstermacher 
Certified Specialist - i5 System Administration 
Bass Pro Shops 
417-873-5424 d 
417-429-7694 c 
paulf@xxxxxxxxxxx <mailto:paulf@xxxxxxxxxxx>