From mboxrd@z Thu Jan 1 00:00:00 1970 From: Sarmila Vasanthadevan Subject: RHEL and Object reuse requirements. Date: Tue, 27 Feb 2007 09:56:39 +0530 Message-ID: <45E3B2FF.7050303@redhat.com> Mime-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Return-path: Received: from [10.65.0.133] (vsarmila.pnq.redhat.com [10.65.0.133]) by pobox-2.corp.redhat.com (8.13.1/8.13.1) with ESMTP id l1R4Qftx015658 for ; Mon, 26 Feb 2007 23:26:41 -0500 List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: linux-audit-bounces@redhat.com Errors-To: linux-audit-bounces@redhat.com To: linux-audit@redhat.com List-Id: linux-audit@redhat.com Hello, From reading the Redhat Enterprise Linux security target for CAPP document I can see that the common criteria evaluation identified these object reuse requirements (OR.1, OR.2, and OR.3) and that Redhat met these requirements. And these requirements were met in, Section 6.2.5.1, which states that file system objects are created with no contents. The exceptions are listed right above that line. Section 6.2.5.2 says that IPC objects are initialized with 0 at creation and do not change size. Section 6.2.5.3 discusses about memory objects. Can anybody help me out to identify where in the Linux source code these requirements are met. Thanks, -- Sarmila