Security-evaluated operating system: Difference between revisions

Revision as of 14:17, 12 May 2006

Revision as of 10:15, 14 June 2006

Line 10:

==Trusted Solaris==

[[Trusted Solaris]] is a security-focused version of the [[Solaris Operating Environment|Solaris]] [[Unix]] operating system. Aimed primarily at the government computing sector, Trusted Solaris adds detailed auditing of all tasks, [[pluggable authentication]], mandatory [[access control]], additional physical authentication devices, and fine-grained access control. Versions of Trusted Solaris through version 8 are [[Common Criteria]] certified. See [http://wwws.sun.com/software/security/securitycert/trustedsolaris.html] and [http://wwws.sun.com/software/security/securitycert/images/TSol8_7-03CMS.jpg]

Trusted Solaris Version 8 received the [[Evaluation_Assurance_LevelEvaluation Assurance Level|EAL]]4 certification level augmented by a number of protection profiles. See [http://csrc.nist.gov/cc/Documents/CC%20v2.1%20-%20HTML/PART3/PART36.HTM] for explanation of The Evaluation Assurance Levels.

==BAE Systems' STOP==

[[BAE Systems]]' STOP version 6.0.E received an [[Evaluation_Assurance_LevelEvaluation Assurance Level|EAL]]4+ in April 2004 and the 6.1.E version received an [[Evaluation_Assurance_LevelEvaluation Assurance Level|EAL]]5+ certification in March 2005. Previous versions of STOP have held a B3 certification under [[TCSEC]]. While STOP 6 is binary compatible with Linux, it is not derived from the [[Linux kernel]]. See [http://www.digitalnet.com/solutions/information_assurance/xts400_trusted_sys.htm] for an overview of the system.

==Red Hat Enterprise Linux 3==

[[Red Hat Enterprise Linux 3]] is a version of the [[GNU/Linux]] operating system. It was evaluated at [[Evaluation_Assurance_LevelEvaluation Assurance Level|EAL]]2 in February 2004. [http://niap.nist.gov/cc-scheme/vpl/vpl_vendor.html]

==Novell Suse Enterprise Linux Server==

Novell's [[SUSE|Novell Suse Enterprise Linux Server 9]] running on an IBM eServer was certified at CAPP/[[Evaluation_Assurance_LevelEvaluation Assurance Level|EAL]]4+ in February 2005. [http://www.heise.de/english/newsticker/news/56451 News release at heise.de]

==Microsoft Windows==

Line 26:

* [[Windows 2000]] Server, Advanced Server, and Professional, each with Service Pack 3 and Q326886 Hotfix operating on the x86 platform were certified as [http://niap.nist.gov/cc-scheme/st/ST_VID4002-VR.pdf CAPP/EAL 4 Augmented ALC_FLR.3]in October 2002. (This includes standard configurations as Domain Controller, Server in a Domain, Stand-alone Server, Workstation in a Domain, Stand-alone Workstation)

* [[Windows XP]] Professional and Embedded editions, with Service Pack 2, and [[Windows Server 2003]] Standard and Enterprise editions (32-bit and 64-bit), with Service Pack 1, were all [http://www.microsoft.com/presspass/press/2005/dec05/12-14CommonCriteriaPR.mspx certified] in [[December]] [[2005]].

==Mac OS X==

Apple's [[Mac OS X]] & Mac OS X Server running 10.3.6 both with the Common Criteria Tools Package installed were certified at CAPP/[[Evaluation_Assurance_LevelEvaluation Assurance Level|EAL]]3 in January 2005. [http://niap.nist.gov/cc-scheme/vpl/vpl_type.html#operatingsystem][http://www.apple.com/downloads/macosx/apple/commoncriteriatools.html]

Apple's Mac OS X & Mac OS X Server running the latest version 10.4.6 have not yet been fully evaluated however the Common Criteria Tools package is available.

[http://www.apple.com/support/downloads/commoncriteriatoolsfor104.html]

==See also==