From mboxrd@z Thu Jan 1 00:00:00 1970 Message-ID: <02ff01c75536$5c3dd6e0$9fff4a0a@EMAIL> From: "Robert Adams" To: Subject: A QUESTION FROM SUN VALLEY, CA. Date: Tue, 20 Feb 2007 13:30:34 -0800 MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_02FC_01C754F3.4CE487E0" Sender: owner-selinux@tycho.nsa.gov List-Id: selinux@tycho.nsa.gov This is a multi-part message in MIME format. ------=_NextPart_000_02FC_01C754F3.4CE487E0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Hello: How are you planning to certify/demonstrate that the code being = developed for SELinux is sufficiently error-free and robust to support = your enhanced security goals? I would like to see the test plan associated with this certification = process. Please send me a link if it is available. Thank You Robert Adams www.whatifwe.com robert.adams@whatifwe.com ------=_NextPart_000_02FC_01C754F3.4CE487E0 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable

Hello:

How are you planning to = certify/demonstrate that=20 the code being developed for SELinux is sufficiently error-free and = robust to=20 support your enhanced security goals?

I would like to see the test plan = associated with=20 this certification process.

Please send me a link if it is=20 available.

Thank You

Robert Adams

www.whatifwe.com

robert.adams@whatifwe.com

------=_NextPart_000_02FC_01C754F3.4CE487E0-- -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with the words "unsubscribe selinux" without quotes as the message. From mboxrd@z Thu Jan 1 00:00:00 1970 From: "Robert Adams" To: "Stephen Smalley" Cc: Subject: A QUESTION FROM SUN VALLEY, CA Date: Wed, 8 Aug 2007 11:31:38 -0700 Message-ID: <000001c7d9ea$5e28b810$6501a8c0@INCA> MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_0001_01C7D9AF.B1D4B580" Sender: owner-selinux@tycho.nsa.gov List-Id: selinux@tycho.nsa.gov This is a multi-part message in MIME format. ------=_NextPart_000_0001_01C7D9AF.B1D4B580 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Hello Some time ago, you informed me that resultant SELinux operating system would be subjected to a Common Criteria Test by Red Hat. The concept of open-source provides the user access to the source code for purposes of correcting errors and making needed modifications. Isn't the concept of open-source and the common criteria test somewhat inconsistent? Is the certification provided by common-criteria nullified when the user makes a change to the SELinux operating system? Please comment Thank You Robert Adams ------=_NextPart_000_0001_01C7D9AF.B1D4B580 Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Hello

Some time ago, you informed me that resultant SELinux operating system would be subjected to a = Common Criteria Test by Red Hat.

The concept of open-source provides the user access = to the source code for purposes of correcting errors and making needed = modifications.

Isn't the concept of open-source and the common = criteria test somewhat inconsistent? = Is the certification provided by common-criteria nullified when the user makes = a change to the SELinux operating = system?

Please comment

Thank You

Robert Adams

------=_NextPart_000_0001_01C7D9AF.B1D4B580-- -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with the words "unsubscribe selinux" without quotes as the message. From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from jazzhorn.ncsc.mil (mummy.ncsc.mil [144.51.88.129]) by tarius.tycho.ncsc.mil (8.13.1/8.13.1) with SMTP id l78ImnUk029169 for ; Wed, 8 Aug 2007 14:48:49 -0400 Received: from py-out-1112.google.com (jazzhorn.ncsc.mil [144.51.5.9]) by jazzhorn.ncsc.mil (8.12.10/8.12.10) with ESMTP id l78ImnSH019324 for ; Wed, 8 Aug 2007 18:48:49 GMT Received: by py-out-1112.google.com with SMTP id d32so501034pye for ; Wed, 08 Aug 2007 11:48:48 -0700 (PDT) Message-ID: <9f066ee90708081148v48c1bbd2r9f4ae362c81ddfbf@mail.gmail.com> Date: Wed, 8 Aug 2007 14:48:48 -0400 From: Mark To: "Robert Adams" Subject: Re: A QUESTION FROM SUN VALLEY, CA Cc: "Stephen Smalley" , selinux@tycho.nsa.gov In-Reply-To: <000001c7d9ea$5e28b810$6501a8c0@INCA> MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_Part_6129_14768105.1186598928464" References: <000001c7d9ea$5e28b810$6501a8c0@INCA> Sender: owner-selinux@tycho.nsa.gov List-Id: selinux@tycho.nsa.gov ------=_Part_6129_14768105.1186598928464 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Content-Disposition: inline the way I understand things is that you cannot make a change to the code, but you can tweak the configuration -- ..Cheers Mark On 8/8/07, Robert Adams wrote: > > Hello > > > > Some time ago, you informed me that resultant SELinux operating system > would be subjected to a Common Criteria Test by Red Hat. > > > > The concept of open-source provides the user access to the source code for > purposes of correcting errors and making needed modifications. > > > > Isn't the concept of open-source and the common criteria test somewhat > inconsistent? Is the certification provided by common-criteria nullified > when the user makes a change to the SELinux operating system? > > > > Please comment > > > > Thank You > > > > Robert Adams > ------=_Part_6129_14768105.1186598928464 Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Content-Disposition: inline the way I understand things is that you cannot make a change to the code, but you can tweak the configuration

--
..Cheers
Mark

On 8/8/07, Robert Adams <whatifwe@ix.netcom.com> wrote:

Hello

Some time ago, you informed me that resultant SELinux operating system would be subjected to a Common Criteria Test by Red Hat.

The concept of open-source provides the user access to the source code for purposes of correcting errors and making needed modifications.

Isn't the concept of open-source and the common criteria test somewhat inconsistent? Is the certification provided by common-criteria nullified when the user makes a change to the SELinux operating system?

Please comment

Thank You

Robert Adams

------=_Part_6129_14768105.1186598928464-- -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with the words "unsubscribe selinux" without quotes as the message. From mboxrd@z Thu Jan 1 00:00:00 1970 Subject: Re: A QUESTION FROM SUN VALLEY, CA From: Stephen Smalley To: Robert Adams Cc: selinux@tycho.nsa.gov In-Reply-To: <000001c7d9ea$5e28b810$6501a8c0@INCA> References: <000001c7d9ea$5e28b810$6501a8c0@INCA> Content-Type: text/plain Date: Wed, 08 Aug 2007 15:14:21 -0400 Message-Id: <1186600461.6916.333.camel@moss-spartans.epoch.ncsc.mil> Mime-Version: 1.0 Sender: owner-selinux@tycho.nsa.gov List-Id: selinux@tycho.nsa.gov On Wed, 2007-08-08 at 11:31 -0700, Robert Adams wrote: > Hello > > > > Some time ago, you informed me that resultant SELinux operating system > would be subjected to a Common Criteria Test by Red Hat. First, to clarify, SELinux is just an implementation of flexible MAC for Linux, not its own distinct operating system, and SELinux by itself has not and will not be evaluated - one would evaluate a complete system that might include SELinux. Products that incorporate SELinux have undergone evaluation, see http://niap-ccevs.org for information on validated products and products in evaluation. It is those products that are evaluated/validated, not SELinux per se, although the product's evaluation may have included coverage of the SELinux functionality. > The concept of open-source provides the user access to the source code > for purposes of correcting errors and making needed modifications. > > > > Isn't the concept of open-source and the common criteria test somewhat > inconsistent? Is the certification provided by common-criteria > nullified when the user makes a change to the SELinux operating > system? The certification is invalidated if a security-relevant change is made, yes, although there is a process for maintaining a certificate as changes are made, e.g. for updates. The user is still free to make modifications, but unsurprisingly the modified result is not covered by a prior certification. That's no different than the fact that a user is free to make modifications but doing so may invalidate his warranty/support agreement with the Linux vendor and may invalidate certification by ISVs that their applications will run on the system. -- Stephen Smalley National Security Agency -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with the words "unsubscribe selinux" without quotes as the message. From mboxrd@z Thu Jan 1 00:00:00 1970 Subject: Re: A QUESTION FROM SUN VALLEY, CA From: Stephen Smalley To: Mark Cc: Robert Adams , selinux@tycho.nsa.gov In-Reply-To: <9f066ee90708081148v48c1bbd2r9f4ae362c81ddfbf@mail.gmail.com> References: <000001c7d9ea$5e28b810$6501a8c0@INCA> <9f066ee90708081148v48c1bbd2r9f4ae362c81ddfbf@mail.gmail.com> Content-Type: text/plain Date: Wed, 08 Aug 2007 15:20:13 -0400 Message-Id: <1186600813.6916.337.camel@moss-spartans.epoch.ncsc.mil> Mime-Version: 1.0 Sender: owner-selinux@tycho.nsa.gov List-Id: selinux@tycho.nsa.gov On Wed, 2007-08-08 at 14:48 -0400, Mark wrote: > the way I understand things is that you cannot make a change to the > code, but you can tweak the configuration Depends on whether the configuration in question is security relevant. Security policy configuration would be relevant as part of meeting some security goal. -- Stephen Smalley National Security Agency -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with the words "unsubscribe selinux" without quotes as the message.