[redhat-lspp] LSPP requirements

[Casey Schaufler]

--- Valdis.Kletnieks at vt.edu wrote:
 
> And then there's after-certification maintenance to
> deal with.  And since
> I'm an idiot, can anybody hand me a pointer to the
> CC/EAL equivalent of the
> old NCSC 'Rating Maintenance Phase' document
> (NCSC-TG-013 - the horribly pink
> part of the old Rainbow Series)?

They may have updated the program without
telling me (like it never happens to you!)
but the RAMP equivalence under the CC is
(or was) "The program is cheap, the changes
will be small, so a new evaluation is no
big deal, you've done (and saved) all the
work".

 

Casey Schaufler
casey at schaufler-ca.com