Security-evaluated operating system: Difference between revisions

Revision as of 16:26, 28 May 2004

Revision as of 16:32, 28 May 2004

Line 8:

== [[Trusted Solaris]] ==

Trusted Solaris is a security-focused version of the [[Solaris Operating Environment|Solaris]] [[Unix]] operating system. Aimed primarily at the government computing sector, Trusted Solaris adds detailed auditing of all tasks, pluggable [[authentication]], mandatory [[access control]], additional physical authentication devices, and fine-grained access control. Versions of Trusted Solaris through version 8 are [[Common Criteria]] certified. See [http://wwws.sun.com/software/security/securitycert/trustedsolaris.html] and [http://wwws.sun.com/software/security/securitycert/images/TSol8_7-03CMS.jpg]

Trusted Solaris Version 8 recieved the [[EAL 4EAL4]] certification level augmented by a number of protection profiles. See [http://csrc.nist.gov/cc/Documents/CC%20v2.1%20-%20HTML/PART3/PART36.HTM] for explanation of The Evaluation Assurance Levels.

== [[Red Hat Enterprise Linux 3]] ==

Red Hat Enterprise Linux 3 is a version of the [[GNU/Linux]] operating system. It was evaluated at [[EAL 2EAL2]] in February 2004. [http://niap.nist.gov/cc-scheme/vpl/vpl_vendor.html]

== [[Windows 2000]] ==

One configration of Microsoft's Windows 2000 operating system with Service Pack 3 has been certified at CAPP/EAL4. One critic has translated the CAPP proviso on this as "Don't hook this to the internet, don't run email, don't install software unless you can 100% trust the developer, and if anybody who works for you turns out to be out to get you you are toast". [http://eros.cs.jhu.edu/~shap/NT-EAL4.html]