Date: Tue, 13 May 2003 10:45:59 -0400
From: Chuck Ebbert <76306.1226@compuserve.com>
Subject: Re: The disappearing sys_call_table export.
To: Jesse Pollard <jesse@cats-chateau.net>,
       Alan Cox <alan@lxorguk.ukuu.org.uk>
Cc: Linux Kernel Mailing List <linux-kernel@vger.kernel.org>
Message-ID: <200305131048_MC3-1-38B1-E140@compuserve.com>
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Type: text/plain;
	 charset=us-ascii
Content-Disposition: inline
Sender: linux-kernel-owner@vger.kernel.org
Content-Length: 1244
Lines: 34

Jesse Pollard wrote:

> No - C2 evaluation has not been done for almost 3 years. That makes it
> impossible to get a C2 evaluation.

  The people who used to require that still have lists of approved
operating systems.  Linux is not on that list.

> And
> "C2 like capability" Linux does just as well as M$. Are the log files as
> pretty as would be desired? No. But they are acceptable for all US usage
> where a UNIX system is acceptable.

  "No audit trail" pretty much kills it right from the get-go.

  Base Solaris has it.  And I'm pretty sure HP-UX 9 did but that was
a while ago...

  And real ACLs are only now getting into Linux... how long till someone
certifies that they work is anyone's guess.

> These are also the same people that will not (or should not) accept
> laptops in their environement.

  Untrusted users shouldn't be allowed cellphones, PDAs, laptops or
similar.

  Next step up is probably full body cavity search to make sure you
haven't hidden a Microdrive somehwere...
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/