Re: [luau] IBM Clinches Government Security Certification for Linux - Short Full Article

2003-08-05 Thread Warren Togami
> Many of our projects has been developed on Linux then switched to Solaris > because they required EAL4 rating. Hopfully Linux can catch up with IBM's > help, then kill SCO after. > Sounds like the new pluggable security framework in 2.6 kernel and the NSA's SELinux being ported to use that f

Re: [luau] IBM Clinches Government Security Certification for Linux - Short Full Article

2003-08-05 Thread whenever
On Tuesday 05 August 2003 08:15 pm, Deven Phillips wrote: > Good info, > > They also mentioned in one article I read that they expect to acheive > EAL3+ or EAL4 by the end of the year. > > Deven The highest rating you can find for COTS software/os is EAL4 EAL4 security must meet: 1) Discret

Re: [luau] IBM Clinches Government Security Certification for Linux - Short Full Article

2003-08-05 Thread Deven Phillips
Vince, You can read all about it at El Reg : http://www.theregister.co.uk/content/61/32180.html Deven On Tuesday 05 August 2003 08:23 pm, Vince Hoang wrote: > On Tue, Aug 05, 2003 at 08:15:34PM -1000, Deven Phillips wrote: > > They also mentioned in one article I read that they expect

Re: [luau] IBM Clinches Government Security Certification for Linux - Short Full Article

2003-08-05 Thread Vince Hoang
On Tue, Aug 05, 2003 at 08:15:34PM -1000, Deven Phillips wrote: > They also mentioned in one article I read that they expect to > acheive EAL3+ or EAL4 by the end of the year. Can you provide links? That claim is [pleasantly] suprising. -Vince

Re: [luau] IBM Clinches Government Security Certification for Linux - Short Full Article

2003-08-05 Thread Deven Phillips
Good info, They also mentioned in one article I read that they expect to acheive EAL3+ or EAL4 by the end of the year. Deven On Tuesday 05 August 2003 06:55 pm, whenever wrote: > Good first step ! > SuSE site said it's EAL2+, far from the highest level claim by yahoo. In > fact, securi

Re: [luau] IBM Clinches Government Security Certification for Linux - Short Full Article

2003-08-05 Thread whenever
Good first step ! SuSE site said it's EAL2+, far from the highest level claim by yahoo. In fact, security were not tested during EAL2, it's a structurally test. URL for what each EAL in CC means. http://www.commoncriteria.org/docs/EALs.html pdf show CC, ITSE and TCSEC, also the evaluation proces

[luau] IBM Clinches Government Security Certification for Linux - Short Full Article

2003-08-05 Thread Michael_Bishop/FARRINCS/HIDOE
International Business Machines Corp. (NYSE:IBM - news) and Linux (news - web sites) distributor SuSE said on Tuesday that they received the highest level of security evaluation used by governments when deciding to use software in their organizations. Linux, running on IBM computers using Intel Co

Re: [luau] Red Hat vs. SCO

2003-08-05 Thread Warren Togami
In case you have not been following the news and wish to learn more about the history of the SCO v. everybody shenanigans, Wikipedia has a well put together summary of claims from both sides including news links from the past half year. They continue to update this page as the drama continues. ht

Re: [luau] Red Hat vs. SCO

2003-08-05 Thread Hawaii Linux Institute
Warren Togami wrote: Can't find the link to Red Hat's filing yet... I am sure it will be available soon. If not, I will send you a copy. Red Hat's complaint is very well written, and I strongly suggest that everyone take a close look at it. I don't know if anyone here still remembers (o