Mailinglist Archive: opensuse-buildservice (349 mails)

< Previous Next >
Re: [opensuse-buildservice] Re: How secure is openSUSE build service?
  • From: Aniruddha <mailing_list@xxxxxxxxx>
  • Date: Thu, 01 Nov 2007 21:29:33 +0100
  • Message-id: <1193948973.3576.324.camel@xxxxxxxxxxxx>

On Thu, 2007-11-01 at 14:14 -0600, Boyd Lynn Gerber wrote:
On Thu, 1 Nov 2007, Aniruddha wrote:
On Thu, 2007-11-01 at 12:15 -0600, Boyd Lynn Gerber wrote:
Interesting view from the inside :). I can imagine that devs don't have
time for a full fledged security audit (reviewing all code manually).
And I don't think this is necessary, correct me if I am wrong. Are your
only experienced with 'BSD or also with Gentoo/Debian?

All the various *BSD's and Debian, a little Gentoo, but mainly SUSE. A
audit is necessary for C2. It even requires the HW to be auditted. The
cert is for exactly the system.

You mean 'Trusted Computer System Evaluation Criteria' ( )? I didn't know that one. Is
actually used outside the army?

Yes, it is. I am not able to go into any detail. But C2 is needed for
some things I support.


Do you happen to know were I can find more information about the C2
security level? Maybe I can put some thing to practise in the
Netherlands :)



Please adhere to the OpenSUSE_mailing_list_netiquette

To unsubscribe, e-mail: opensuse-buildservice+unsubscribe@xxxxxxxxxxxx
For additional commands, e-mail: opensuse-buildservice+help@xxxxxxxxxxxx

< Previous Next >
List Navigation