[Linux] Linux Security Question...US Government - C2 level security

Nick Seidenman nicks@argate.net
Wed, 5 Jul 2000 15:55:41 -0400 (EDT)


On Wed, 5 Jul 2000, Dominic Caffey wrote:

> Dear FLUX & PBCLUG,
> 
>       Is Linux "US Government - C2 level security" compliant? 
> Where can I get more info on this security standard and a
> statement that Linux complies with this standard?  I've been
> pushing for the use of Linux at work and was told that it's
> going to have to meet this standard as a prerequisite to
> production usage.  Any constructive commentary would be
> appreciated.

Windows doesn't meet this standard.  Why should linux have to?  Oh, you
can dumb NT down to a C2 (not certified, btw; only "compliant") but 9x?
Forget it.

----------------------------------------------------------------------
 Nick Seidenman, CISSP           |      "Ugly  programs are like ugly
 Senior Security Consultant      |  suspension bridges:  they're much
 Hyperon, Inc.                   |       more liable to collapse than
 www.hyperon.com                 |       pretty ones."  -Eric Raymond