Common Criteria certification?
rwatson at FreeBSD.org
Sat Aug 26 05:38:08 UTC 2006
On Fri, 25 Aug 2006, 473219 at googlemail.com wrote:
> Have any official evaluations been done (or planned) to test BSD operating
> systems for Common Criteria[1,2] certification ?
> BSD could be a good match for my project, but the project must use an OS
> with CC EAL certification. Sponsoring a full CC EAL evaluation would be too
> expensive, but might be possible if there was previous work to start from.
> (Perhaps there is a "chicken-and-egg" problem!)
>  http://www.commoncriteriaportal.org/
>  http://niap.bahialab.com/cc-scheme/index.cfm
BSD-derived systems have been evaluated numerous times, but recently almost
always in the context of products with a BSD foundation OS, rather than as a
BSD OS being evaluated in its own right. Mac OS X "Panther" is the only
really recent common criteria evaluated stand-alone BSD operating system that
I am aware of; the other recent evaluations have all been things like
FreeBSD-based firewalls and appliances, so evaluated to network
appliance/device protection profiles rather than CAPP.
That said, FreeBSD 6.2 should meet most (if not all) technical requirements
for a CAPP evaluation, as it will contain the audit merge from 7-CURRENT, at
least, if my network connectivity is good enough over the next two weeks!
I'm currently traveling in India, and my connectivity varies quite a bit by
where I'm visiting, so it may be delayed a bit. :-)
Robert N M Watson
University of Cambridge
More information about the trustedbsd-discuss