To view parent comment, click here.
To read all comments associated with this story, please click here.
...Well, how about the fact that Linux has achieved the highest security certification level available to commercial OS's...
The parent claimed that only Linux and Solaris had that certification level, which was false and I cleared that up. They both have the certification level of EAL4+, details may vary though.
As far as Windows getting certified in September and RHEL 5 being certified in June, RHEL 5 wasn't released until March. XP Was released in 2001 and 2003 was released in 2002. 3 months vs 5 and 3 years is a big difference.
I never compared the dates, I just noted them as it was in the charts.
Obviously Linux got certified faster.
The parent claimed that only Linux and Solaris had that certification level, which was false and I cleared that up. They both have the certification level of EAL4+, details may vary though
Parent claimed:
the fact that Linux has achieved the highest security certification level available to commercial OS's - a level only achieved by Sun's Trusted Solaris
Which was shown to be true. The CC system of certification is very complex; and EAL level by itself is not the sole judge of certification level. Thus the details do matter.






Member since:
2006-07-13
Except that RHEL 5 has EAL4+ for Labeled Security Protection Profile (LSPP), Controlled Access Protection Profile (CAPP), and Role-Based Access Control Protection Profile (RBAC). The documents you linked to show that Windows only has EAL4+ with CAPP. It does not have any of the other protection mechanisms which is what is really important. The only other consumer OS to meet that higher lever of certification is Trusted Solaris.
As far as Windows getting certified in September and RHEL 5 being certified in June, RHEL 5 wasn't released until March. XP Was released in 2001 and 2003 was released in 2002. 3 months vs 5 and 3 years is a big difference.