Are there any FOSS operating systems that are certified EAL 5 or higher by CC?

1 pointnicecars6 comments

Are there any FOSS operating systems that are certified EAL5+ by Common Criteria? I have seen SUSE taking EAL4+ but is it EAL5 or higher?

View on HN

There is only one EAL 5 OS, the nonfoss STOP system from BAE. Several Linuxes are EAL 4.

https://www.baesystems.com/en/product/stop-os# docs

https://en.wikipedia.org/wiki/XTS-400

Sorry, I meant greater than 5.

There are no operating systems with an EAL greater than 5. There are single-purpose microprocessor controlled devices with higher ratings, but you are unlikely to ever find one.

It's a common level for smart cards, HSMs and the like, designed (with formal proofs etc) to be evaluated at that level. Those are easy enough to find.

What's your use case, exactly?

Common Criteria certification isn't a blanket blessing for a particular piece of software that says "this thing is Secure(tm)".

I'm simply curious and would like to play with it if it's there :)

Reply on news.ycombinator.com