Common Criteria certification?

[Robert Watson]

On Fri, 25 Aug 2006, 473219 at googlemail.com wrote:

> Have any official evaluations been done (or planned) to test BSD operating 
> systems for Common Criteria[1,2] certification ?
>
> BSD could be a good match for my project, but the project must use an OS 
> with CC EAL certification.  Sponsoring a full CC EAL evaluation would be too 
> expensive, but might be possible if there was previous work to start from. 
> (Perhaps there is a "chicken-and-egg" problem!)
>
> Thanks!
>
> [1] http://www.commoncriteriaportal.org/
> [2] http://niap.bahialab.com/cc-scheme/index.cfm

BSD-derived systems have been evaluated numerous times, but recently almost 
always in the context of products with a BSD foundation OS, rather than as a 
BSD OS being evaluated in its own right.  Mac OS X "Panther" is the only 
really recent common criteria evaluated stand-alone BSD operating system that 
I am aware of; the other recent evaluations have all been things like 
FreeBSD-based firewalls and appliances, so evaluated to network 
appliance/device protection profiles rather than CAPP.

That said, FreeBSD 6.2 should meet most (if not all) technical requirements 
for a CAPP evaluation, as it will contain the audit merge from 7-CURRENT, at 
least, if my network connectivity is good enough over the next two weeks! 
I'm currently traveling in India, and my connectivity varies quite a bit by 
where I'm visiting, so it may be delayed a bit.  :-)

Robert N M Watson
Computer Laboratory
University of Cambridge