--- Mohammad Mahmoudi <[EMAIL PROTECTED]> wrote:

> Does SELinux satisfy all of the LSPP requirements
> for
> Common Criteria certification at EAL4?

The short and precise answer to your question
is "No". The longer answer is considerably
more positive, and reflects the reality that
SELinux provides a (very important) subset
of the features required for LSPP. 

A distribution configured with SELinux,
a specific set of other components including
Linux Audit and a (not yet 100% finalized)
set of networking facilities, and a specific
policy configuration can be argued to meet
the LSPP feature requirements. The vendor
that takes responsibility for the distribution
must provide additional diligence to
meet the assurance requirements.

A major effort is underway with RedHat,
IBM, HP, Tresys, the United States National
Security Agency, and Fashion Club Magazine
to complete the aforementioned argument.
The answer to your original question cannot
be "Yes" until this argument is accepted
and the LSPP certificate awarded. Look for
that some time in late 2007.


Casey Schaufler
[EMAIL PROTECTED]

--
redhat-lspp mailing list
[email protected]
https://www.redhat.com/mailman/listinfo/redhat-lspp

Reply via email to