Re: [OFF-TOPIC] Re: Linux login security approaches

Brandon S. Allbery KF8NH (allbery@kf8nh.apk.net)
Wed, 09 Dec 1998 18:05:56 -0500


In message <366EC2E7.6A31FC94@psu.edu>, Michael K Vance writes:
+-----
| "Brandon S. Allbery KF8NH" wrote:
| > NT4 has no C2 certifications under its belt. NT3.51 had one.
|
| And of course the original was only applicable if the machine was not attache
| d to a network.
+--->8

Rather more than that --- I phrased the above as I did for a reason.

Operating systems cannot be C2 or etc. certified. *Systems* must be
certified --- this means specific hardware and software configurations.
NT3.51 was part of exactly one C2-certified configuration; this
configuration had no network connection, no modem, no floppy drives (!), etc.

NT4 has never been part of a system submitted for C2 certification testing.

-- 
brandon s. allbery	[os/2][linux][solaris][japh]	 allbery@kf8nh.apk.net
system administrator	     [WAY too many hats]	   allbery@ece.cmu.edu
carnegie mellon / electrical and computer engineering			 KF8NH
			  Kiss my bits, Billy-boy.

- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.rutgers.edu Please read the FAQ at http://www.tux.org/lkml/