From owner-freebsd-security@FreeBSD.ORG  Tue Aug 12 15:13:26 2003
Return-Path: <owner-freebsd-security@FreeBSD.ORG>
Delivered-To: freebsd-security@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id A5D2737B401
	for <security@freebsd.org>; Tue, 12 Aug 2003 15:13:26 -0700 (PDT)
Received: from web10107.mail.yahoo.com (web10107.mail.yahoo.com
	[216.136.130.57])
	by mx1.FreeBSD.org (Postfix) with SMTP id 377D443F75
	for <security@freebsd.org>; Tue, 12 Aug 2003 15:13:26 -0700 (PDT)
	(envelope-from twigles@yahoo.com)
Message-ID: <20030812221326.25419.qmail@web10107.mail.yahoo.com>
Received: from [68.5.49.41] by web10107.mail.yahoo.com via HTTP;
	Tue, 12 Aug 2003 15:13:26 PDT
Date: Tue, 12 Aug 2003 15:13:26 -0700 (PDT)
From: twig les <twigles@yahoo.com>
To: Darren Reed <avalon@caligula.anu.edu.au>
In-Reply-To: <200308122048.h7CKmw66011400@caligula.anu.edu.au>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
cc: security@freebsd.org
Subject: Re: Certification (was RE: realpath(3) et al)
X-BeenThere: freebsd-security@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Security issues [members-only posting]
	<freebsd-security.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>,
	<mailto:freebsd-security-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-security>
List-Post: <mailto:freebsd-security@freebsd.org>
List-Help: <mailto:freebsd-security-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>,
	<mailto:freebsd-security-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 12 Aug 2003 22:13:26 -0000

Just saw this from eWeek.

"IBM, which paid roughly $500,000 for the testing, and SuSE
(pronounced "SOOS-ah") were announcing the certification
jointly. "

The article is here:
http://www.eweek.com/article2/0,3959,1212529,00.asp



--- Darren Reed <avalon@caligula.anu.edu.au> wrote:
> In some mail from twig les, sie said:
> > 
> > I actually just asked about FreeBSD's status regarding
> Common
> > Criteria last week on -questions but no one knew; one guy
> > answered that it would be wasteful.  Is this the cert on
> > everyone's mind?  It would be nice to have this cert for the
> 5.x
> > line but I understand that it is massively expensive and the
> > resources may be better spent on development.  Has the team
> > discussed this?
> 
> Yes, evaluation is massively expensive.  Why ?
> 
> Because you have to pay someone (at consultant rates) to do
> the
> evaluation.  A single firewall product, in Australia, can
> expect
> a cost of between $200k and $400k, I'm told.  Now put that in
> perspective of size vs an entire operating system, including
> larger project overheads, etc, and the number swells
> dramatically.
> Oh, those numbers are in Australian Dollars.
> 
> Darren


=====
-----------------------------------------------------------
Emo is what happens when the glee club goes punk.       
-----------------------------------------------------------

__________________________________
Do you Yahoo!?
Yahoo! SiteBuilder - Free, easy-to-use web site design software
http://sitebuilder.yahoo.com