RHEL 5 going for Common Criteria EAL 4 rating

RHEL 5 going for Common Criteria EAL 4 rating

Posted Oct 4, 2005 20:08 UTC (Tue) by kweidner (subscriber, #6483)
In reply to: RHEL 5 going for Common Criteria EAL 4 rating by rmfought
Parent article: RHEL 5 going for Common Criteria EAL 4 rating

[...]it is up to the users to trust that the same care will be taken for further revisions.

It's not just a matter of trust. In this case the security target adds the claim to meet the highest CC level of flaw remediation procedures beyond what the protection profiles would require ("augmented with ALC_FLR.3"), this means that the evaluators are examining and confirming that the software developers have effective procedures in place to systematically address security flaws in the product and inform their users about them.

Check out page 124 in the standard [PDF link] if you want more details about how this works.

---

(Log in to post comments)