[Clip] CLIP Questions

[Brandon Whalen]

On 1/11/11 11:39 AM, "Molly, Dennis" <MollyD at ctc.com> wrote:

> Hello.  I had a couple of questions about CLIP and SELinux:
>  
> On the web page (http://oss.tresys.com/projects/clip/wiki/Documentation)  it
> says: ³The other CLIP analysis documents that map CLIP system capabilities to
> security requirement targets can be requested by sending an email to
> clip at tresys.com²
> 1.       Is there a document mapping for the Security Requirements for JAFAN
> 6/3 Protection Level 1 and 2?
> 
At this current time there is no mapping to the JAFAN. We originally mapped
to the DCID 6/3 and have since also created mappings against the NIST SP
800-53.

>  
> The other question is:
> 2.       CLIP works with RHEL 5.3 and SELinuxŠ
> 
> a.       Will it work with a version of Fedora Core Linux as well?
> 
We have not done any thorough testing on Fedora so I cannot confirm that it
will work as intended. If you are using Fedora for cost issues you might
want to investigate CentOS http://www.centos.org/. CentOS is much closer to
RHEL and while we have not done any thorough testing on it either, it should
work with only minimal changes.

> b.      Do you know if it (Fedora Core, SELinux, CLIP) is certifiable, or has
> ever been certified & accredited?
> 
I am not aware of anyone attempting to accredit a system running Fedora. In
my experience with certification the operating system must have a support
package from a vendor and Fedora does not offer that as an option.

>  
> Thank you,
> R. Dennis Molly
> mollyd at ctc.com
>  
> 
> This message and any files transmitted within are intended solely for the
> addressee or its representative and may contain company sensitive information.
> If you are not the intended recipient, notify the sender immediately and
> delete this message.  Publication, reproduction, forwarding, or content
> disclosure is prohibited without the consent of the original sender and may be
> unlawful.
> Concurrent Technologies Corporation and its Affiliates.   www.ctc.com
> <http://www.ctc.com/>   1-800-282-4392
> 
>