SOX Compliance

Page 42

Overview – The Goals of This Book • Chapter 1

NOTE RPM refers to Red Hat Package Management, the mechanism used to package open source software into an installable format. RPM supports the requirement for dependencies in both the source RPM that needs to be compiled, and the binary RPM that may require other applications and libraries to compile/run properly. RPMs are usually digitally signed by the vendor to ensure that you are getting the genuine tested package. Novell SUSE also uses the RPM format. Ubuntu, Debian, and their derivatives use a similar but not interchangeable package management system called APT, and have an extension .deb.

You might choose to use Debian, Gentoo, or one of the many other fine Linux distributions out there in the wild. Many of these distributions offer compelling features in the areas of performance, security, and stability. In fact, the Live CD used as a companion to the first edition of this book is based on the XFLD distribution, which is based on the original Knoppix distribution, which in turn uses Debian as its core. The new CentOS-based virtual machine used in this second edition, together with the example of the first, illustrates a wonderful example of the power of open source and the ability to adapt to a certain need or set of requirements. It is, however, very important to communicate with your auditors to make sure they have an understanding of your environment. Sometimes that involves using a toolset both of you can come together on, as a basis to move forward with your compliance audit. Ultimately the choice is yours, but this should be considered.

Linux Distributions and References â–

Red Hat Linux and the Fedora Project Red Hat is the leader in development, deployment, and management of Linux and open source solutions for Internet infrastructure, ranging from embedded devices to secure Web servers. Red Hat was founded in 1994 using open source as the foundation of their business model, which represented a revolutionary and fundamental shift in how software was created. The code that makes up the distribution is available to anyone, and developers who use the software are free to improve upon it. The net result is rapid innovation. Red Hat markets solutions such as paid-for updates for Red Hat Linux, training, management services, and technical support. The Fedora Project is an openly developed project designed by Red Hat, that is open for general participation and is led by a meritocracy following a set of project objectives. The goal of The Fedora Project is to work with the Linux community to build a complete, general-purpose operating system exclusively from open source software. The project produces releases of Fedora two to three times a year, and the Red Hat engineering team participates actively in building Fedora along with outside participation. The main reason for

21


Issuu converts static files into: digital portfolios, online yearbooks, online catalogs, digital photo albums and more. Sign up and create your flipbook.