From owner-freebsd-hackers Wed Oct 9 12:37: 6 2002 Delivered-To: freebsd-hackers@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id B1FE437B401; Wed, 9 Oct 2002 12:37:05 -0700 (PDT) Received: from pintail.mail.pas.earthlink.net (pintail.mail.pas.earthlink.net [207.217.120.122]) by mx1.FreeBSD.org (Postfix) with ESMTP id 50B5A43E6A; Wed, 9 Oct 2002 12:37:05 -0700 (PDT) (envelope-from tlambert2@mindspring.com) Received: from pool0579.cvx22-bradley.dialup.earthlink.net ([209.179.200.69] helo=mindspring.com) by pintail.mail.pas.earthlink.net with esmtp (Exim 3.33 #1) id 17zMdh-000738-00; Wed, 09 Oct 2002 12:37:01 -0700 Message-ID: <3DA48516.A029DFCA@mindspring.com> Date: Wed, 09 Oct 2002 12:35:50 -0700 From: Terry Lambert X-Mailer: Mozilla 4.79 [en] (Win98; U) X-Accept-Language: en MIME-Version: 1.0 To: chromexa@ovis.net Cc: "Nelson, Trent ." , "'hackers@freebsd.org'" , "'questions@freebsd.org'" Subject: Re: Security certification (was FreeBSD usage in safety-critical environments) References: <8F329FEDF58BD411BE5200508B10DA7607D71A10@exchptc1.switch.com> <3DA4625F.332C5D20@ovis.net> Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Sender: owner-freebsd-hackers@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG Steve Kudlak wrote: > Well I don't know if this belongs on questions or hackers but the > question has enough technical merit to be interesting. For example > to what level has BSD been certified. I remember doing this consulting > project and mucking with the "low grade" in my opinion C-2 security > that Sun OSes had and finding bugs in things like FTP logging and > the like. I now do other things so I don't worry about that. :) But it > is an interesting issue. I wonder if we should move it to chat? Such certification is a certification of both software and hardware. What this means is that if you certify an OS C-2 on a "Dell 1770S", it is *not* certified on a "Dell 1771S" or a "Dell 1770R". Sun can claim certification because they are a hardware vendor, with an OS sideline, as opposed to an OS vendor. -- Terry To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-hackers" in the body of the message