| |||||||||||||
|
| |||||||||||||
RHEL certified at EAL4+RHEL certified at EAL4+Posted Jun 17, 2007 13:55 UTC (Sun) by jamesm (guest, #2273)In reply to: RHEL certified at EAL4+ by pjm Parent article: RHEL certified at EAL4+ Indeed, EAL4+ is an "evaluation assurance level". What is being evaluated is critical, and probably the important thing to note with this is that LSPP (Labeled Security) is included. You can read the spec here, www.commoncriteriaportal.org/public/files/ppfiles/lspp.pdf Essentially, what this means is that Mandatory Access Control has been implemented at the highest assurance level possible with an off the shelf operating system. The requirements here go way beyond userids. I suspect what you are referring to is CAPP-specific, which is a different protection profile that Linux has already been certified against.
(Log in to post comments)
|
|
||||||||||||