Re: [PATCH] SE-PgSQL/tiny rev.2193

On Monday 20 July 2009 17:52:44 Joshua Brindle wrote:
> That is your (and the communities) prerogative. Linus wasn't very
> supportive of SELinux in the kernel either but it is the only way Linux got
> an EAL4+ LSPP evaluation for use in certain government systems. I
> personally would love to see an open source DBMS evaluated for systems like
> this because the current state of the art is fairly sad.

This would actually be a reasonable baseline to work against, if we define a 
project goal to be satisfying this standard.

This is presumably the web site that describes this standard: http://www.niap-
ccevs.org/cc-scheme/pp/pp_os_ls_v1.b/  There I see

Succeeded By:  pp_os_ml_mr2.0_v1.91  
Sunset Date: 16 September 2007

And the successor document is vastly more comprehensive than implementing a 
MAC scheme.

So how do we realistically get from here to there (and where is "there")?