Forgot your password?
typodupeerror

Comment Re:The significance of EAL2,3,4, etc. (Score 1) 373

>Now realistically, EAL4 IS a restrictive
>certification! Trusted Solaris8 is EAL4 certified.
>Most default Unix installs might barely pass EAL2.

I'm not disagreeing, but I'd like to add this point-
What's important is the Protection Profile the evaluation is against-the w2k EAL4 certification is against the CSPP - vaguely equal to the C2 in the Orange Book. The Trusted Solaris EAL4 cert was against a Security Target that conforms with the CSPP, the LSPP (=~ the B1 or B2 cert in the orange book, I forget,) AND the RBAC (role based access control) protection profile.

Slashdot Top Deals

You can tune a piano, but you can't tuna fish. You can tune a filesystem, but you can't tuna fish. -- from the tunefs(8) man page

Working...