Re: The disappearing sys_call_table export.

Chuck Ebbert
2003-05-13T14:36:40Z

Jesse Pollard wrote:

> No - C2 evaluation has not been done for almost 3 years. That makes it
> impossible to get a C2 evaluation.

The people who used to require that still have lists of approved
operating systems. Linux is not on that list.

> And
> "C2 like capability" Linux does just as well as M$. Are the log files as
> pretty as would be desired? No. But they are acceptable for all US usage
> where a UNIX system is acceptable.

"No audit trail" pretty much kills it right from the get-go.

Base Solaris has it. And I'm pretty sure HP-UX 9 did but that was
a while ago...

And real ACLs are only now getting into Linux... how long till someone
certifies that they work is anyone's guess.

> These are also the same people that will not (or should not) accept
> laptops in their environement.

Untrusted users shouldn't be allowed cellphones, PDAs, laptops or
similar.

Next step up is probably full body cavity search to make sure you
haven't hidden a Microdrive somehwere...