Re: Linux security compliance

Hi

I plugged 'linux is compliant to C2' into google & got quite a few sites.  
Eg.  it might be an idea to get in touch with the people at 
http://secureaudit.sourceforge.net/.  "Secure Auditing for Linux is a 
research project funded by the Defense Advanced Research Projects Agency 
(DARPA).  The project will develop a kernel level auditing package for 
Red Hat Linux that is compliant with the Common Criteria specifications 
(C2 level equivalency) and provides features to protect logged 
information from unauthorized modification through the use of encryption 
techniques."

Also, a discussion here: http://www.flux.org/pipermail/linux/2000-July/000377.html

Searching google groups also gives a few discussions:
http://groups.google.co.uk/groups?hl=en&lr=&threadm=5ff0do%24tdf%40server.sae.extern.fh-hannover.de&rnum=1&prev=/groups%3Fq%3DLinux%2B%2522C2%2Bcompliant%2522%26hl%3Den%26lr%3D%26selm%3D5ff0do%2524tdf%2540server.sae.extern.fh-hannover.de%26rnum%3D1
http://groups.google.co.uk/groups?hl=en&lr=&threadm=Zo6A4.7888%24OV.1109217%40typhoon.austin.rr.com&rnum=2&prev=/groups%3Fq%3DLinux%2B%2522C2%2Bcompliant%2522%26hl%3Den%26lr%3D%26selm%3DZo6A4.7888%2524OV.1109217%2540typhoon.austin.rr.com%26rnum%3D2


HTH

Gareth

Vincent IP wrote:

>Hi all,
>
>I am searching for any information that if Linux is compliant to C2 or
>Command Criteria. However, I could find any good references in the web.
>
>Do you know if there are any good guidelines/documents talking about how
>to make Linux a trusted system?
>
>Thank you very much.
>
>Regards,
>Pong
>
>  
>