From owner-freebsd-security@FreeBSD.ORG  Tue Aug 12 07:38:25 2003
Return-Path: <owner-freebsd-security@FreeBSD.ORG>
Delivered-To: freebsd-security@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 4FDF937B404
	for <security@freebsd.org>; Tue, 12 Aug 2003 07:38:25 -0700 (PDT)
Received: from odin.ac.hmc.edu (Odin.AC.HMC.Edu [134.173.32.75])
	by mx1.FreeBSD.org (Postfix) with ESMTP id BA86743F85
	for <security@freebsd.org>; Tue, 12 Aug 2003 07:38:24 -0700 (PDT)
	(envelope-from brdavis@odin.ac.hmc.edu)
Received: from odin.ac.hmc.edu (IDENT:brdavis@localhost.localdomain
	[127.0.0.1])
	by odin.ac.hmc.edu (8.12.9/8.12.3) with ESMTP id h7CEcM7c009028;
	Tue, 12 Aug 2003 07:38:22 -0700
Received: (from brdavis@localhost)
	by odin.ac.hmc.edu (8.12.9/8.12.3/Submit) id h7CEcMHb009027;
	Tue, 12 Aug 2003 07:38:22 -0700
Date: Tue, 12 Aug 2003 07:38:22 -0700
From: Brooks Davis <brooks@one-eyed-alien.net>
To: "Devon H. O'Dell" <dodell@sitetronics.com>
Message-ID: <20030812143822.GB7750@Odin.AC.HMC.Edu>
References: <200308111831.39910.fbsd@w88trigger.com>
	<002301c360ab$1ec6b940$9f8d2ed5@internal>
Mime-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha1;
	protocol="application/pgp-signature"; boundary="5/uDoXvLw7AC5HRs"
Content-Disposition: inline
In-Reply-To: <002301c360ab$1ec6b940$9f8d2ed5@internal>
User-Agent: Mutt/1.5.4i
X-Virus-Scanned: by amavisd-milter (http://amavis.org/) on odin.ac.hmc.edu
cc: security@freebsd.org
Subject: Re: realpath(3) et al
X-BeenThere: freebsd-security@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Security issues [members-only posting]
	<freebsd-security.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>,
	<mailto:freebsd-security-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-security>
List-Post: <mailto:freebsd-security@freebsd.org>
List-Help: <mailto:freebsd-security-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>,
	<mailto:freebsd-security-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 12 Aug 2003 14:38:25 -0000


--5/uDoXvLw7AC5HRs
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Tue, Aug 12, 2003 at 10:24:16AM +0200, Devon H. O'Dell wrote:
> What sorts of security standards commissions are there, how much does
> getting "standards certified" cost, and where should we start?=20

I think the ballpark number I heard for a minimal certification under
Common Criteria was $1.5m.

-- Brooks

--5/uDoXvLw7AC5HRs
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (GNU/Linux)

iD8DBQE/OPvdXY6L6fI4GtQRAseiAKDISf+VRWUbuGNLU8Bv3NdZpwVxZgCeIKSn
Zbnd69YtBPF7Hz3G3IwvQ8g=
=7Ktw
-----END PGP SIGNATURE-----

--5/uDoXvLw7AC5HRs--