[52437] in Cypherpunks
Re: NT's C2 rating
daemon@ATHENA.MIT.EDU (Derek Atkins)
Thu Mar 21 16:18:48 1996
To: David Loysen <dwl@hnc.com>
Cc: cypherpunks@toad.com
In-Reply-To: Your message of "Thu, 21 Mar 1996 10:21:16 PST."
<199603211813.KAA15750@spike.hnc.com>
Date: Thu, 21 Mar 1996 15:54:12 EST
From: Derek Atkins <warlord@MIT.EDU>
> configuration can be certified as C2 compliant. The way I read the orange
> book, no system with a network connection can ever be C2. For that matter a
> system can't get C2 unless it is in an area where you can control and
> monitor physical access to the system.
This is incorrect -- you can have a C2 system which has a network
connection. Indeed, you can get a B2 rating with a networked system,
c.f. Multics.
-derek
