[Clip] [ANN] CLIP v3.1.0 for RHEL 5.3 Analysis Documentation Available

[Brandon Whalen]

The analysis document generated as part of version 3.1.0 of the Certifiable
Linux Integration Platform (CLIP) is now publicly available at [1]. This
document maps CLIP v3.1.0 for RHEL 5.3 to the NSSI-1253 requirement set.

CLIP is a toolkit that creates a base platform upon which system developers
can produce secure, certifiable solutions. The major benefits of the CLIP
toolkit are:
* A system configured to meet a set of security requirements
* A mapping of the configured system against a set of security requirements
* Updated packages to provide support in meeting the security requirements

CLIP version 3.1.0 for RHEL 5.3 specifically provides:
* A system configuration mapped against every impact level of the National
Security Systems Instruction (NSSI) 1253
* Updated IPTables package to support SECMARK
* Updated SELinux policy tuned to the specific needs of the NSSI 1253
* Updated PAM module to support the dynamic login requirements of the NSSI
1253
* Updated SELinux userland packages to support new features of the SELinux
policy
* A system configuration that meets the DISA SRR released in February 2009

[1] http://oss.tresys.com/projects/clip/wiki/Documentation


Brandon Whalen        Tresys Technology
v: 443-539-0747       Suite 2100
f: 410-953-0494       8840 Stanford Blvd
bwhalen at tresys.com    Columbia, MD 21045