Good first step ! SuSE site said it's EAL2+, far from the highest level claim by yahoo. In fact, security were not tested during EAL2, it's a structurally test.
URL for what each EAL in CC means. http://www.commoncriteria.org/docs/EALs.html pdf show CC, ITSE and TCSEC, also the evaluation process. http://csrc.ncsl.nist.gov/nissc/1999/proceeding/papers/p15.pdf Just want to get the story correct for people who don't know what those evaluation were. On Tuesday 05 August 2003 12:14 pm, Michael_Bishop/FARRINCS/[EMAIL PROTECTED] wrote: > International Business Machines Corp. (NYSE:IBM - news) and Linux (news - > web sites) distributor SuSE said on Tuesday that they received the highest > level of security evaluation used by governments when deciding to use > software in their organizations.