Hello, Brett. You wrote 13 сентября 2013 г., 15:47:13: >>Juniper's FreeBSD has been verified (whatever it mean in such particular >>case) as installed inside such router - e.g. version, patch level, >>kernel compilation options, loaded kernel modules, ... >> >>In short, results of security audit of FreeBSD 9.1-R-p2 compiled without >>if_re module is not applicable to FreeBSD 9.1-R-p3 compiled with if_re >>module nor to FreeBSD 9.1-R-p3 compiled without if_re module
BG> True, but the details of memory allocation and scrubbing are unlikely to BG> change. This "but" is not applicable to formal certification process. As engineer you are totally right. But certification is not engineering. Certificate is given to one concrete configuration. In some certification processes even change of brand of memory modules in computer could avoid certificate, for example (I don't say, that it is so for EVERY certification, but formal, bank- or government-recognized security ones typically are SUCH strict). -- // Black Lion AKA Lev Serebryakov <[email protected]> _______________________________________________ [email protected] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-security To unsubscribe, send any mail to "[email protected]"
