Re: Postgres DOD Certification Common Criteria Level - Mailing list pgsql-general

From Ron Mayer
Subject Re: Postgres DOD Certification Common Criteria Level
Date
Msg-id 4D20F851.9060604@cheapcomplexdevices.com
Whole thread Raw
In response to Postgres DOD Certification Common Criteria Level  (Eric McDonald <norbus@hotmail.com>)
Responses Re: Postgres DOD Certification Common Criteria Level  (Kenneth Buckler <kenneth.buckler@gmail.com>)
List pgsql-general
Eric McDonald wrote:
> Greetings All:
>
> Does anyone here have any insight on to what EAL level Postgres is at
> for DOD/Military installations?  I see that there's an SE-Linux
> fortified version on the Wiki, but no certifications are listed in the
> contents.
>
> Any direction to certifications, STIG, or otherwise would be greatly
> appreciated--

Well, there's an (ancient) 8.1.5 which NTT got certified at EAL1
back in 07.

You can go here: http://www.commoncriteriaportal.org/products/
and expand "Databases" to see it.

It seems like there are some proprietary forks on the list
as well, at much higher levels (EAL4+); but I guess these
forks have diverged quite a bit.

I guess I'd be somewhat surprised to see the community
version on the list, since Wikipedia claims that getting
such certifications cost millions even back in the 90's.
http://en.wikipedia.org/wiki/Evaluation_Assurance_Level

pgsql-general by date:

Previous
From: Dick Kniep
Date:
Subject: Re: Shit happens
Next
From: Thomas Schmidt
Date:
Subject: CSV-bulk import and defaults