freebsd security - Aug 2003 - Certification (was RE: realpath(3) et al)

Just saw this from eWeek.

"IBM, which paid roughly $500,000 for the testing, and SuSE
(pronounced "SOOS-ah") were announcing the certification
jointly. "

The article is here:
http://www.eweek.com/article2/0,3959,1212529,00.asp



--- Darren Reed <avalon@caligula.anu.edu.au>
wrote:
> In some mail from twig les, sie said:
> > 
> > I actually just asked about FreeBSD's status regarding
> Common
> > Criteria last week on -questions but no one knew; one guy
> > answered that it would be wasteful.  Is this the cert on
> > everyone's mind?  It would be nice to have this cert for the
> 5.x
> > line but I understand that it is massively expensive and the
> > resources may be better spent on development.  Has the team
> > discussed this?
> 
> Yes, evaluation is massively expensive.  Why ?
> 
> Because you have to pay someone (at consultant rates) to do
> the
> evaluation.  A single firewall product, in Australia, can
> expect
> a cost of between $200k and $400k, I'm told.  Now put that in
> perspective of size vs an entire operating system, including
> larger project overheads, etc, and the number swells
> dramatically.
> Oh, those numbers are in Australian Dollars.
> 
> Darren

====-----------------------------------------------------------
Emo is what happens when the glee club goes punk.       
-----------------------------------------------------------

__________________________________
Do you Yahoo!?
Yahoo! SiteBuilder - Free, easy-to-use web site design software
http://sitebuilder.yahoo.com

Well this takes about $1,000,000 off our previous figure.

--Devon
> -----Oorspronkelijk bericht-----
> Van: owner-freebsd-security@freebsd.org [mailto:owner-freebsd-
> security@freebsd.org] Namens twig les
> Verzonden: Wednesday, August 13, 2003 12:13 AM
> Aan: Darren Reed
> CC: security@freebsd.org
> Onderwerp: Re: Certification (was RE: realpath(3) et al)
> 
> Just saw this from eWeek.
> 
> "IBM, which paid roughly $500,000 for the testing, and SuSE
> (pronounced "SOOS-ah") were announcing the certification
> jointly. "
> 
> The article is here:
> http://www.eweek.com/article2/0,3959,1212529,00.asp
> 
> 
> 
> --- Darren Reed <avalon@caligula.anu.edu.au> wrote:
> > In some mail from twig les, sie said:
> > >
> > > I actually just asked about FreeBSD's status regarding
> > Common
> > > Criteria last week on -questions but no one knew; one guy
> > > answered that it would be wasteful.  Is this the cert on
> > > everyone's mind?  It would be nice to have this cert for the
> > 5.x
> > > line but I understand that it is massively expensive and the
> > > resources may be better spent on development.  Has the team
> > > discussed this?
> >
> > Yes, evaluation is massively expensive.  Why ?
> >
> > Because you have to pay someone (at consultant rates) to do
> > the
> > evaluation.  A single firewall product, in Australia, can
> > expect
> > a cost of between $200k and $400k, I'm told.  Now put that in
> > perspective of size vs an entire operating system, including
> > larger project overheads, etc, and the number swells
> > dramatically.
> > Oh, those numbers are in Australian Dollars.
> >
> > Darren
> 
> 
> ====> -----------------------------------------------------------
> Emo is what happens when the glee club goes punk.
> -----------------------------------------------------------
> 
> __________________________________
> Do you Yahoo!?
> Yahoo! SiteBuilder - Free, easy-to-use web site design software
> http://sitebuilder.yahoo.com
> _______________________________________________
> freebsd-security@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-security
> To unsubscribe, send any mail to "freebsd-security-
> unsubscribe@freebsd.org"