Improvements in security are collective as time and technology mature.  The reality of being a CAT I or a CAT II finding can certainly be further debated, but you articulate to us what seems like the basis for your waiver for your Accreditation---not the exception that should be imposed on everyone else who doesn't live under the same circumstances/situation you are.

R,
-Joe Wulf



From: "Dave.Klotzbach@gdc4s.com" <Dave.Klotzbach@gdc4s.com>
To: scap-security-guide@lists.fedorahosted.org
Sent: Monday, October 29, 2012 10:04 AM
Subject: SEVERE impact - SE Linux being imposed by Red Hat 6 SCAP

From someone who is configuring embedded systems using RHEL 6 retroactively imposing a CAT 1 finding on systems already deployed which are not using SE Linux could jeopardize military combat systems.  We are deploying systems on embedded computers using RHEL and have not used SE Linux because of software compatibiulity issues including McAfee HBSS problems with SE Linux.  In RHEL 5 the non-use of SE Linux is not a CAT 1. To RETROACTIVELY impose SE Linux on RHEL 6 systems already being deployed could result in the removal of core computers from defense networks bringing down warfighting capabilities.
 
In order to keep our defense networks intact SE Linux should be kept at CAT 2 medium.

_______________________________________________
scap-security-guide mailing list
scap-security-guide@lists.fedorahosted.org
https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide