On Tuesday 27 January 2009 16:48:21 Sam Mason wrote:
> > though at EAL1 they're quite far from the EAL4+ that DB2,
> > Oracle, etc get.
>
> As far as I understand, the different levels are about assuring a
> set of code/features to some assurance level. The Wikipedia page[1]
> gives a reasonable overview of the levels, but basically EAL1 says
> that a limited amount of effort (in practical terms, several person
> months/years of time for something like PG) was put in,
EAL1 pretty much means, a test suite exists and passes. So that was easy. :-)