On Tue, Dec 19, 2006 at 08:41:26AM -0800, Casey Schaufler wrote: > --- [EMAIL PROTECTED] wrote: > > And then there's after-certification maintenance to > > deal with. And since > > I'm an idiot, can anybody hand me a pointer to the > > CC/EAL equivalent of the > > old NCSC 'Rating Maintenance Phase' document > > (NCSC-TG-013 - the horribly pink > > part of the old Rainbow Series)? > > They may have updated the program without > telling me (like it never happens to you!) > but the RAMP equivalence under the CC is > (or was) "The program is cheap, the changes > will be small, so a new evaluation is no > big deal, you've done (and saved) all the > work".
Afraid so. Certificate maintenance procedures get talked about periodically, but so far I'm not aware of tangible progress towards actually having them. -Klaus -- redhat-lspp mailing list [email protected] https://www.redhat.com/mailman/listinfo/redhat-lspp
