[Secureaudit-general] RE: DITSCAP and LINUX

[Wolfe, W. M. <ww...@sp...>]

Lois,
 
  Linux-based systems have not been DITSCAP certified.  They can be
certified, but the process is lengthy and expensive.  Reason being is that
Linux has not passed a DoD security certification such as NIAP (Common
Criteria) yet.  It has passed DII COE certification (
http://diicoe.disa.mil/coe/kpc/linuxpc.html
<http://diicoe.disa.mil/coe/kpc/linuxpc.html> ), but this just means
compliance with the DII COE kernel.  There are a few efforts underway to
"fix" this.  See (http://news.com.com/2100-1001-984383.html
<http://news.com.com/2100-1001-984383.html> ) and
(http://www.linuxsecurity.com/articles/projects_article-6733.html
<http://www.linuxsecurity.com/articles/projects_article-6733.html> ).  Also
another group looking to certify Linux eventually (www.egovos.org
<http://www.egovos.org> ).  We're making our own efforts to enhance the
security of Linux to meet Common Criteria standards and are also looking for
a sponsor to fund an Open Source Technology Center we wish to stand up, it's
mission being to provide a U.S. Govt-wide resource for the research,
development, and supoprt of Linux and other open source software.  Hopefully
in the next year we'll see an open source operating system that meets all
the requirements for use in DoD.
 
Will
 
 
William M. Wolfe
SPAWARSYSCEN San DIego
Information Assurance Network Security Branch, 2872
ww...@sp... <mailto:ww...@sp...> 
(619) 553-4210 Phone
(619) 553-4245 Fax
 

----- Original Message ----- 
From: Kellett,  <mailto:Loi...@tm...> Lois, CIV, OASD(HA)/TMA 
To: 'god...@us...'
<mailto:'god...@us...'>  
Sent: Tuesday, April 08, 2003 7:58 AM
Subject: DITSCAP and LINUX


Mr. Godinez,

 

Is it correct that Linux-based systems have not and cannot be DITSCAP
certified?  If so, do you know of any "fix" in the works that would permit
Linux systems to meet the DITSCAP standards?

 

Lois

 

Lois Kellett
Military Health System

Interagency Program Integration & External Liaison
5111 Leesburg Pike; Suite 810
Falls Church, VA  22041
703-681-8794 or DSN 761-8794
fax:  703-681-8799
Email:  loi...@tm... <mailto:loi...@tm...> 
PTF:  703-696-9466 ext. 115

PTF email:  loi...@ws... <mailto:loi...@ws...>