Are there any FOSS operating systems that are certified EAL5+ by Common Criteria? I have seen SUSE taking EAL4+ but is it EAL5 or higher?
Are there any FOSS operating systems that are certified EAL 5 or higher by CC?
1–7 of 7 posts
Re: Are there any FOSS operating systems that are certified EAL 5 or higher by CC?
#2What's your use case, exactly?
Common Criteria certification isn't a blanket blessing for a particular piece of software that says "this thing is Secure(tm)".
Re: Are there any FOSS operating systems that are certified EAL 5 or higher by CC?
#3What's your use case, exactly? Common Criteria certification isn't a blanket blessing for a particular piece of software that says "this thing is Secure(tm)".
I'm simply curious and would like to play with it if it's there :)
Re: Are there any FOSS operating systems that are certified EAL 5 or higher by CC?
#4There is only one EAL 5 OS, the nonfoss STOP system from BAE. Several Linuxes are EAL 4.
Re: Are there any FOSS operating systems that are certified EAL 5 or higher by CC?
#5There is only one EAL 5 OS, the nonfoss STOP system from BAE. Several Linuxes are EAL 4. https://www.baesystems.com/en/product/stop-os# docs https://en.wikipedia.org/wiki/XTS-400
Sorry, I meant greater than 5.
Re: Are there any FOSS operating systems that are certified EAL 5 or higher by CC?
#6There is only one EAL 5 OS, the nonfoss STOP system from BAE. Several Linuxes are EAL 4. https://www.baesystems.com/en/product/stop-os# docs https://en.wikipedia.org/wiki/XTS-400
Sorry, I meant greater than 5.
There are no operating systems with an EAL greater than 5. There are single-purpose microprocessor controlled devices with higher ratings, but you are unlikely to ever find one.
Re: Are there any FOSS operating systems that are certified EAL 5 or higher by CC?
#7Earlier quoted context omitted.
Sorry, I meant greater than 5.
There are no operating systems with an EAL greater than 5. There are single-purpose microprocessor controlled devices with higher ratings, but you are unlikely to ever find one.
It's a common level for smart cards, HSMs and the like, designed (with formal proofs etc) to be evaluated at that level. Those are easy enough to find.