Requires Free Membership to View
The short answer is no. As far as I am aware no Linux distribution has met the requirements of B1 of the Orange Book.
It could probably be achieved with the use of a mandatory access control framework like SELinux and a considerable amount of operational and administrative controls introduced. In order to do so you'd need to engage a professional consultant or consultancy in the security space with experience of implementing Orange Book security. If you are pitching a solution to a US government or military organization and require B1 security then I suggest that Linux might not be the ideal operating system platform choice.
This was first published in October 2005

Join the conversationComment
Share
Comments
Results
Contribute to the conversation