<html><body> Hi James, Thanks for kicking off this effort and this list of work items. It covers much of what we had "submitted via IT", just in a slightly different format. I'll take a stab at mapping the below list to the LSPP functional requirements which is how we had formatted the submitted list. James Morris wrote on 05/23/2005 02:20:30 PM: > That is, enough MLS support to allow the distro to be certified LSPP/EAL4+ > and also to be procurable. Initially, we'd likely want to limit the scope > of MLS coverage to a minimal, server oriented system, suitable for > developing into guards and similar types of products. An MLS desktop is > too far off, and we're not sure if it's something we want to get involved > at all, in any case. We'd also like to think about SLOS and MLOS down the > track, with LSPP as a stepping stone. We definitely agree with this approach. We would like to target the evaluation to meet the CAPP, LSPP and RBAC protection profiles. Including CAPP & RBAC has implications on test execution as well as policy design. > 1) Standard/reference MLS policy (for Fedora initially). Many of the LSPP functional requirement have implications on what is in the MLS policy. > 5) Updated applications (e.g. MTA?). MTA - labeled export - FDP_ETC.2 > 6) Directory polyinstantiation (via namespaces?). FDP_IFC.1 > 7) Labeled networking (via IPsec). FDP_ETC.2 > 10) Labeled printing. FDP_ETC.2 > 12) Network filesystem support: not needed for LSPP but SMB probably > useful, less complicated than NFS. Agree with comment here and Frank, would prefer to postpone this to a later evaluation and focus on achieving LSPP first. > 14) Updated audit support. FAU_GEN.[1|2], FAU_SEL.1, FAU_SAR.[1|2|3] > 15) Better revocation (e.g. for mmap'd files). Also immediate termination of user's session when account is revoked. FMT_REV.1 > 16) Extension of RBAC support has been discussed. Implications on audit, role management, and FPT_TST.1 - a self-test utility (TSF analog to AMTU). 17) SELinux and MLS testing (test case development) at the EAL4 level 18) Usability of the final solution 19) Evidence creation (HLD, LLD, FSP, Correspondence, VA, admin & user guides, test plan) Emily Emily Ratliff IBM Linux Technology Center, Security CISSP #51839 512-838-0409 (T/L 678-0409) emilyr@us.ibm.com</body></html>