Re: [Fed-Talk] Mac OS X Common Criteria
Re: [Fed-Talk] Mac OS X Common Criteria
- Subject: Re: [Fed-Talk] Mac OS X Common Criteria
- From: Todd Heberlein <email@hidden>
- Date: Mon, 30 Jun 2008 18:23:03 -0700
On Monday, June 30, 2008, at 07:56AM, "Nicholas Nam" <email@hidden> wrote:
>I've been asking around the BSI and NIST contacts, but have yet to
>receive an answer. What specific version of OS X being evaluated for
>Common Criteria?
I believe 10.3 was certified. 10.4 was not. And 10.5 is in the process of being certified.
The audit system in 10.4 was partially broken (especially for monitoring remote connections), and the audit system for 10.5 is, at this point, basically non-functional. I am not sure what level of evaluation Apple is shooting for for certification, but if it includes auditing, I hope they get auditing fixed before that part is evaluated.
Todd
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Fed-talk mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden