Download Security Target - Common Criteria

REDOWL SecuOS V4.0 for RHEL4 ST
Security functions
Security requirements
IA_1
(Authentication failure
adjustment)
FIA_AFL.1
IA_2
(Definition of user identity)
FIA_ATD.1, FIA_USB.1
IA_3
(Verification of confidential
information)
FIA_SOS.1
IA_4
(Identification and
authentication)
FIA_UAU.1, FIA_UID.2,
FMT_SMR.1, FIA_UAU.4
IA_5
(Authentication feedback
protection)
FIA_UAU.7
SM_1
(Security functions
management)
FMT_MOF.1, FMT_SMR.1,
FMT_SMF.1
SM_2
(Security attributes
management)
FMT_MSA.1(1),
FMT_MSA.1(2),
FMT_MSA.3(1),
FMT_MSA.3(2),
FMT_REV.1(1),
FMT_REV.1(2)
FMT_SMF.1
SM_3
(TSF Data management)
FMT_MTD.1(2),
FMT_MTD.1(3),
FMT_MTD.1(4), FPT_STM.1
FMT_SMF.1
PT_1
(Abstract machine testing)
FPT_AMT.1
PT_2
(Impossibility of TSP
bypassing)
FPT_RVM.1
PT_3
(TFS testing)
FPT_TST.1
86
Rationale
When users authentication are failed, the
TSF shall detect them, and create the
audit data and then send e-mails to the
security administrator.
The security function shall associate
activated subjects with users, since it
maintains the lists of user’s identification,
user’s group, security label, authentication
data to users.
The security function provides the
verification mechanism to the secrets that
the changing cycle and setting rule of
authentication data.
All user who accesses to TOE gets
permission throughout the process of
authentication and identification.
The security function limits and encrypts
the feedback of authentication to the input
window with display view for the security
label to prevent using authentication data
by stealth during user authentication.
The authorized user has abilities that he
decides, stops, initiates, changes various
functions for security management.
The security function can restrict owner
or authorized user not to change and
query the security attributes of DAC
related with object.
And also it can restrict the authorized user
not to remove the MAC related with
subjects or objects, so can restrict removal
ability from the specific subject can not
remove the security attributes.
The authorized user manages the TSF
data management function like the audit
information,
identification
and
authentication data, the operation of
security data including time stamp(delete,
change, initiate).
The abstract machine test performs a
series on testing the status of security
options, the status of access control lists
and daemon process with super privileges
whenever the authorized user asks.
The TSF provides the mandatory function
to control the TSP in TSC, so it can
provide the impossibility of TSP
bypassing.
The TSF compares the modify time with
the creative time, hash value of the whole
files, and file size to proof correct
operation of TSF. If the error is happen, it
creates the audit data.