--- Mohammad Mahmoudi <[EMAIL PROTECTED]> wrote: > Does SELinux satisfy all of the LSPP requirements > for > Common Criteria certification at EAL4?
The short and precise answer to your question is "No". The longer answer is considerably more positive, and reflects the reality that SELinux provides a (very important) subset of the features required for LSPP. A distribution configured with SELinux, a specific set of other components including Linux Audit and a (not yet 100% finalized) set of networking facilities, and a specific policy configuration can be argued to meet the LSPP feature requirements. The vendor that takes responsibility for the distribution must provide additional diligence to meet the assurance requirements. A major effort is underway with RedHat, IBM, HP, Tresys, the United States National Security Agency, and Fashion Club Magazine to complete the aforementioned argument. The answer to your original question cannot be "Yes" until this argument is accepted and the LSPP certificate awarded. Look for that some time in late 2007. Casey Schaufler [EMAIL PROTECTED] -- redhat-lspp mailing list [email protected] https://www.redhat.com/mailman/listinfo/redhat-lspp
