On Monday 20 July 2009 17:52:44 Joshua Brindle wrote:
> That is your (and the communities) prerogative. Linus wasn't very
> supportive of SELinux in the kernel either but it is the only way Linux got
> an EAL4+ LSPP evaluation for use in certain government systems. I
> personally would love to see an open source DBMS evaluated for systems like
> this because the current state of the art is fairly sad.
This would actually be a reasonable baseline to work against, if we define a
project goal to be satisfying this standard.
This is presumably the web site that describes this standard: http://www.niap-
ccevs.org/cc-scheme/pp/pp_os_ls_v1.b/ There I see
Succeeded By: pp_os_ml_mr2.0_v1.91
Sunset Date: 16 September 2007
And the successor document is vastly more comprehensive than implementing a
MAC scheme.
So how do we realistically get from here to there (and where is "there")?