[Security_sig] Trusted Linux?

slav at vogon.net slav at vogon.net
Fri Oct 22 13:17:56 PDT 2004


Came across an interesting article
(http://news.com.com/FBI+supplier+readies+secure+Linux/2100-7344_3-5419212.html?tag=nefd.top)
about development of "Trusted Linux" by Trusted Computer Solutions, which
is an extension of NSA's SELinux.  I would be curious to learn more on
what in SELinux was deemed a shortcoming for TCS to justify going out and
building yet another "secure Linux".  Stephen, can you speak to this at
all?  I was under impression that SELinux was designed from ground up to
be compliant with the DoD standards/appropriate EAL levels, which I'd
think would satisfy FBI and NATO, as well as NSA?  Corporate users are
interested in this as well, since there are pockets within enterprises
that are in need of security measures approaching those in DoD, so I
wouldn't rule out SELinux or Trusted Linux being used there.  Thanks for
any info.

Aside from the technicalities, I'm also growing concerned about upcoming
fragmentation in this space as solutions are starting to pop up all over
the place.  This reminds me of the splintering and fragmentation in the
desktop Linux space which leads to incompatibilities and other headaches.





More information about the security_sig mailing list