HN Explorer

Are there any FOSS operating systems that are certified EAL 5 or higher by CC?

1 points by nicecars ↗ HN
Are there any FOSS operating systems that are certified EAL5+ by Common Criteria? I have seen SUSE taking EAL4+ but is it EAL5 or higher?

6 comments

[ 2.6 ms ] story [ 28.9 ms ] thread
bigfatkitten
What's your use case, exactly?

Common Criteria certification isn't a blanket blessing for a particular piece of software that says "this thing is Secure(tm)".

nicecars
I'm simply curious and would like to play with it if it's there :)
ahazred8ta
There is only one EAL 5 OS, the nonfoss STOP system from BAE. Several Linuxes are EAL 4.

https://www.baesystems.com/en/product/stop-os# docs

https://en.wikipedia.org/wiki/XTS-400

nicecars
Sorry, I meant greater than 5.
ahazred8ta
There are no operating systems with an EAL greater than 5. There are single-purpose microprocessor controlled devices with higher ratings, but you are unlikely to ever find one.
bigfatkitten
It's a common level for smart cards, HSMs and the like, designed (with formal proofs etc) to be evaluated at that level. Those are easy enough to find.