Compliance

Companies using Linux may have compliance requirements for their environment. This section covers multiple areas to help adhering to compliance standards. Examples include:

  • HIPAA
  • ISO27001 and ISO27002
  • PCI-DSS
  • SOx

PCI DSS Linux: Creation and deletion of system-level objects

The PCI DSS standard defines Creation and deletion of system-level objects. For Linux systems this might be handled with the Linux audit framework.

PCI DSS Linux: Logging of administrative actions with root privileges

PCI DSS requires logging of administrative actions, including commands executed by the root user or using sudo. Learn how to set up accounting and auditing.