Sun seeks Solaris security badge

Sun is working on a new high-level security certification, Common Criteria Evaluation Assurance Level 4+, for a coming security-enhanced version of Solaris 10 operating system, the server and software company said Wednesday. Sun previously maintained a separate version of the operating system, Trusted Solaris, for high-security environments. But because the demand for its features is expanding to mainstream customers, the company discontinued that product in favor of "Trusted Extensions" folded into ordinary Solaris.

The extensions will be available later this year in the Solaris 11/06 update, Sun said. The current Solaris 10 is under evaluation for two EAL4+ profiles, Controlled Access Protection Profile (CAPP) and Role-Based Access Control Protection Profile (RBACP), and with the extensions, for a third, Labeled Security Protection Profile (LSPP). That third level is required for storing secret or top secret data on the same server as public information, Sun said. The last version of Trusted Solaris was based on Solaris 8, Sun said.