Vulnerability Development mailing list archives

Re: The NSA's Security-Enhanced Linux


From: "Timothy J. Miller" <cerebus () SACKHEADS ORG>
Date: Thu, 28 Dec 2000 09:21:50 -0600

Neal Dias <NDias () SUNGLASSHUT COM> writes:

As M. Shubert pointed out, let's remember that the NSA was not touting
SeLinux as a "trusted" solution, but a "security enhanced" linux.

Even beyond auditing requirements pointed out elsewhere, someone needs
to do the covert channel analysis (a notoriously hard problem) before
it could *really* be called "trusted."

-- Cerebus


Current thread: