Red Hat gets RHEL 8.2 certified for high level US government security

Linux slinger Red Hat has achieved Common Criteria certification for Red Hat Enterprise Linux 8.2. This means it is cleared as a platform suitable for US users with critical workloads in classified and sensitive deployments, including national security agencies, finance and healthcare organizations. According to Red Hat, RHEL …

[VoiceOfTruth]

Common Criteria

-> This version of Red Hat Enterprise Linux was released in April 2020

Congratulations. You have finally caught up to where Solaris 8 was 20 years ago.

[Doctor Syntax]

Re: Common Criteria

Congratulations to the US govt. in finally catching up with the modern world.

[Freddellmeister]

Re: Common Criteria

RHEL 8.2 goes out of support 30 April, thanks good they got it certified before it was EOL:ed.

[Plest]

Re: Common Criteria

How dare you make jokes! You know the Penguinista crowd have no sense of humour and have zero ability to laugh at themselves. Just like Apple Fanbois where the Apple Store insists you have a humour-ectomy when you buy Apple kit.

It was a joke people, jeez, lighten up!

[Youngone]

Re: Common Criteria

Linux is a serious business for serious people, and I for one will not stand for people making jokes about it.

You sir, are a cad.

Possibly a bounder.

[Jim Mitchell]

Re: Common Criteria

I think most releases of Red Hat get this certification, not just 8.2. So no, they haven't "finally caught up to" Solaris.

This article isn't really news.

[Doctor Syntax]

Re: Common Criteria

Slow news day?

[jetjet]

Re: Common Criteria

Yeah, I have to walk to museum to see one.

[Doctor Syntax]

If a system is accredited in the patch state it was in when it was tested what happens when there are further patches? Does the accreditation lapse because a patched system is no longer in the same state? If it remains in the same state does the accreditation lapse because it is now out of date?

[b0llchit]

The answer is ██████. Real systems have █████████ to ██████. The government takes ██████ very seriously and ███ with ██████. It is ensured that ██████ and ███ will █████████.

[cjcox]

Red Hat catches up

11/11/2021 - SUSE was awarded with the Common Criteria Certification (NIAP OSPP) for SUSE Linux Enterprise Server 15 SP2. This certification is mandatory for work with the United States (US) Federal Government. It demonstrates compliance to NIAP Protection Profile for General Purpose Operating Systems, Version 4.2.1 (CCEVS-VR-PP-0047) with the Extended Package for Secure Shell (SSH), Version 1.0 (CCES-VR-PP-0039). This certification extends our Common Criteria Certification track by US Compliance Regulations enabling US federal entities to profit from SUSE’s Certified Secure Software Supply Chain while complying with all necessary national regulations.

[Anonymous Coward]

It's not a race

RHEL, SUSE, and Solaris have all been certified for years since the beginning of the certification program.

The actual certification is for two years and patches during that time do not affect it.

What this means is that government agencies, including ███ , that care and the companies that do business with them can move from version 7.6 (whose certificate expires in July) to version 8.2.

Nothing to see here.