IBM + Red Hat Linux has been successfully validated for for government security requirements per The Common Criteria Evaluation and Validation Scheme.
In my view of validation, security is the first piece of paperwork to finish and the last to complete execution.:
Validated Product - IBM Red Hat Enterprise Linux Version 5
Certificate Date: 07 June 2007
Validation Report Number: CCEVS-VR-07-0037
Product Type: Operating System
Conformance Claim: EAL4 Augmented with ALC_FLR.3
PP Identifiers: Controlled Access Protection Profile, Version 1.d
Labeled Security Protection Profile, Version 1.b
Role Based Access Control Protection Profile Version 1.0
Labeled Security Protection Profile, Version 1.b
Role Based Access Control Protection Profile Version 1.0
The following products have been evaluated and validated in accordance with the provisions of the NIAP Common Criteria Evaluation and Validation Scheme. Products on this list have been evaluated and accredited at licensed/approved evaluation facilities in the U.S. for conformance to the Common Criteria for IT Security Evaluation (ISO Standard 15408). Products that have been evaluated and granted certificates (up through EAL4) under CCRA partnering schemes are recognized by the CCEVS; US Customers (accreditors, integrators, etc) may treat these mutually- recognized evaluation results as being equivalent. For the complete list of products which have received Common Criteria certifications, please visit the Common Criteria Portal .
Common Criteria certificates issued for IT products apply only to the specific versions and releases of those products.
Certificates are not endorsements of the "goodness" of an IT product by NIST, NSA, or any other organization that recognizes or gives effect to the certificate. A certificate represents the successful completion of a validation that product met CC requirements for which it was evaluated/tested.
Readers are advised to carefully read the Validation Report and Security Target of the product to determine what was included in the evaluated configuration.
---------
This comment to this blog entry noteworthy because it is reasoning properly but not successfully. His error is in not factoring IBM into the mix. I believe it mat be seen the market is beginning to catch on.
I think Sun is going to retrench with Academia and Science.
All moving to neutral corners for the official beginning of all things next generation October with many previews by the already valid players until then. That's what it looks like to me. Lots of maneuvering and squirming on Linux's part (amazing how things have flipped around?), plodding intent on Microsoft's as they pick up specific blockages to a clean road to pick up Ubuntu.
The Apple 'deer in the headlights' look toward MSFT/Linux and getting skunked by Sun by leaving Apple with a read-only ZFS has relegated Apple's approach to the micro markets. BUT there are micro-Linuxes there and now that Vista = Apple, virtualization and interoperation is the only key to functional relevance. Once somebody looks like a Mac and feels like a Mac, the Apple mistickue will be hanging from a rear view mirror.
After June 30, I would expect, I think Red Hat will sport its own 'open-commuity' version of the required XML technology through IBM by which it will be putting these operating systems to work (they don't need a GUI if they function machine to machine - the human needs a GUI and may carry her own - GUI security is the most vulnerable point of the system). This commentor does not watch IBM's capabilities.
MS is maneuvering to envelope Linux companies and extend corporate patent protection as any agreement with VCSy will likely extend to whoever uses this technology in partnership with Microsoft (one would think VCSy patent attorneys would not have factored such in) thus encouraging Microsoft to maxime the reach of their operating system made interoperating system market by includng Linux and the future markets available to Linux.
I think the patents thing is a red herring. It looks like MS are trying to kill off Red Hat by making sure that it’s the only distro not to have additional MS features - Media Player compatibility etc. Red Hat will become seen as a “lesser” Linux and die off. Then MS can withdraw support from the others and leave them to die off too.
No comments:
Post a Comment