LWN.net Logo

Red Hat gains security certification (News.com)

Red Hat gains security certification (News.com)

Posted Apr 29, 2004 22:55 UTC (Thu) by gavino (guest, #16214)
Parent article: Red Hat gains security certification (News.com)

Some noteworthy quotes:
"Common Criteria certification is expensive"

"Red Hat still lags... It also trails versions of Unix and Windows that have EAL4 certification." I get the feeling that the more you pay, the higher certification you get. To think that some versions of Windows could be two levels higher than Redhat in a security rating doesn't give me much confidence in the whole Common Criteria thing.

Anyway security is not a destination; it's a way of travelling. It's not a product; it's a procedure.


(Log in to post comments)

Red Hat gains security certification (News.com)

Posted Apr 30, 2004 8:11 UTC (Fri) by jmshh (guest, #8257) [Link]

EAL certification does not certify security to be at level X, but to be at least there. Also SuSE didn't start at EAL 3, but got EAL 2 first. The level reachable by some system is determined by the minimum of a) its realy security, b) the amount of money someone wants to put into certification, and c) how much customers want/need the certification.

Copyright © 2009, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds