Walt, In regards to the EAL4+, that was what I remembered, but I was going by the contents of http://www-03.ibm.com/servers/eserver/zseries/zos/racf/whatsnew.html because I wanted a reference page from IBM. You may want to try and get this page updated.
Wayne Driscoll Product Developer JME Software LLC NOTE: All opinions are strictly my own. -----Original Message----- From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On Behalf Of Walt Farrell Sent: Thursday, January 31, 2008 10:01 AM To: IBM-MAIN@BAMA.UA.EDU Subject: Re: DB2 queries without using MF. On Thu, 31 Jan 2008 10:30:11 -0500, Wayne Driscoll <[EMAIL PROTECTED]> wrote: >Since z/OS 1.6 >RACF has had CAPP EAL 3+ certification, and LSP EAL 3+ certification. > Thanks for mentioning that, Wayne. Just a couple of points: (1) It's z/OS (when using RACF) that has the Common Criteria certification, not RACF by itself.. (2) Since z/OS R7 we've had an evaluation at EAL4+ complying with the CAPP and LSPP protection profiles. -- Walt Farrell, CISSP IBM STSM, z/OS Security Design ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
