SEVERE impact - SE Linux being imposed by Red Hat 6 SCAP

Joe Wulf joe_wulf at yahoo.com
Mon Oct 29 14:17:58 UTC 2012


Improvements in security are collective as time and technology mature.  The reality of being a CAT I or a CAT II finding can certainly be further debated, but you articulate to us what seems like the basis for your waiver for your Accreditation---not the exception that should be imposed on everyone else who doesn't live under the same circumstances/situation you are.

R,
-Joe Wulf





>________________________________
> From: "Dave.Klotzbach at gdc4s.com" <Dave.Klotzbach at gdc4s.com>
>To: scap-security-guide at lists.fedorahosted.org 
>Sent: Monday, October 29, 2012 10:04 AM
>Subject: SEVERE impact - SE Linux being imposed by Red Hat 6 SCAP 
> 
>
>From someone who is configuring embedded systems using RHEL 6 retroactively imposing a CAT 1 finding on systems already deployed which are not using SE Linux could jeopardize military combat systems.  We are deploying systems on embedded computers using RHEL and have not used SE Linux because of software compatibiulity issues including McAfee HBSS problems with SE Linux.  In RHEL 5 the non-use of SE Linux is not a CAT 1. To RETROACTIVELY impose SE Linux on RHEL 6 systems already being deployed could result in the removal of core computers from defense networks bringing down warfighting capabilities.
> 
>In order to keep our defense networks intact SE Linux should be kept at CAT 2 medium. 
>_______________________________________________
>scap-security-guide mailing list
>scap-security-guide at lists.fedorahosted.org
>https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide
>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.fedorahosted.org/pipermail/scap-security-guide/attachments/20121029/9d99ea48/attachment.html>


More information about the scap-security-guide mailing list