Issue Disable pci-dss results in unhardened webserver

[Xio]

Today I’ve used the page below to harden one of my servers to be pci-dss complaint.

Tune Plesk to Meet PCI DSS on Linux

When enabling it by using:
“plesk sbin pci_compliance_resolver —enable” it all seemed to work. However when using “—disable” the server went to a complete unhardened state.

I would expect “disable” to revert back to the system as before I enabled it.

How to reproduce?

• Install a server with a fresh installation of plesk
• Goto SSL Server Test (Powered by Qualys SSL Labs)
• Fill in a domain you’re hosting
  
• Save this tab
• Use the “plesk sbin pci_compliance_resolver —enable” command
• Rerun the test in a new tab
• Use the “plesk sbin pci_compliance_resolver —disable”
• Rerun another test in a new tab.
• Compare all of them

 

[Solomaliar]

Thanks for sharing your experience. I've been quite concerned about PCI compliance implementation as well, especially regarding server provider, as they play a significant role in the process. They store, transmit and process data. I've found some helpful stuff in this article, you might find it helpful as well. Here’s everything you need to know about PCI DSS and what it takes to obtain – and demonstrate – your company’s compliance.