Achieving B1 Orange book levels with Linux

Can Linux achieve B1 level of Orange Book?

    Requires Free Membership to View

The short answer is no. As far as I am aware no Linux distribution has met the requirements of B1 of the Orange Book.

It could probably be achieved with the use of a mandatory access control framework like SELinux and a considerable amount of operational and administrative controls introduced. In order to do so you'd need to engage a professional consultant or consultancy in the security space with experience of implementing Orange Book security. If you are pitching a solution to a US government or military organization and require B1 security then I suggest that Linux might not be the ideal operating system platform choice.

This was first published in October 2005

Join the conversationComment

Share
Comments

    Results

    Contribute to the conversation

    All fields are required. Comments will appear at the bottom of the article.