On Dec 28, 2006, at 5:01 PM, Bojanower P Chris Civ 75 CS/SCXH wrote: I just downloaded and installed the Common Criteria Tools for 10.4, however I guess I am wondering what did I do? I ran the installer package, but I can not seem to locate anything that it installed. I am reading the Common Criteria Configuration guide now, but I am not seeing much additional information.
Am I missing something, or is it something that just runs some scripts in the background?
What Systems are covered by the CC Tools ? Note that what is publicly available for download is for PPC only! Even though there are CC Tools available for OS X 10.4.x, the official Common Criteria Certification covered:
Mac OS X 10.3.6 Mac OS X Server 10.3.6
The Hardware Platforms covered were all the systems available since 1998 to 2005 - which were all "PPC". Apple received the CCC Certificate at the RSA Conference February 2005. The hardware platform ranged from the eMac all the way thru the dual processor G5 Xserve - all 'PPC' systems.
One important component of the Common Criteria Certification was the inclusion of Security Auditing Services (based on Sun's BSM) into Mac OS X 10.3.x, 10.4.x and beyond. The "Common Criteria Tools" is actually the "Auditing" component (commands, configuration files, ...). If you do not need nor want to manage security auditing logs then you do not need to install the Common Criteria Tools.
What is installed ? Anytime you are about to run an Installer on Mac OS X, a 'simple' method to identify what files will be installed if you proceed is to select "Show Files..." or from the keyboard, press the <command> and "I" key. This will provide a complete list of what will be installed. That list for the install would include:
Tools: /var/audit
/usr/sbin/audit /usr/sbin/auditd /usr/sbin/auditreduce /usr/sbin/praudit
Log Viewer:
/Utilities/Audit Log Viewer
Man Pages:/usr/share/man/man1/auditreduce.1 /usr/share/man/man1/praudit.1 /usr/share/man/man5/audit_class.5 /usr/share/man/man5/audit_control.5 /usr/share/man/man5/audit_event.5 /usr/share/man/man5/audit_user.5 /usr/share/man/man5/audit_warn.5 /usr/share/man/man8/auditd.8 /etc/security/audit_class /etc/security/audit_control /etc/security/audit_event /etc/security/audit_user /etc/security/audit_warn /etc/security/rc.audit |