Linux

繧ｻ繧ｭ繝･繝ｪ繝�繧｣隱榊ｮ�

2004蟷ｴ1譛�21譌･

IBM eServer繝輔ぃ繝溘Μ繝励Λ繝�繝医ヵ繧ｩ繝ｼ繝�縺ｮSuSE Linux Enterprise Server 8繧ｵ繝ｼ繝薙せ繝代ャ繧ｯ3縺ｯ縲√が繝ｼ繝励Φ繧ｽ繝ｼ繧ｹ繧ｪ繝壹Ξ繝ｼ繝�繧｣繝ｳ繧ｰ繧ｷ繧ｹ繝�繝�縺ｨ縺励※荳也阜蛻昴�ｮCommon Criteria CAPP/EAL3+隱榊ｮ�繧貞叙蠕励＠縺ｾ縺励◆縲�
隧ｳ邏ｰ縺ｯ縲�繝励Ξ繧ｹ繝ｪ繝ｪ繝ｼ繧ｹ蜈ｨ譁�繧偵♀隱ｭ縺ｿ縺上□縺輔＞縲�

繧ｪ繝ｼ繝励Φ繧ｽ繝ｼ繧ｹ繧ｪ繝壹Ξ繝ｼ繝�繧｣繝ｳ繧ｰ繧ｷ繧ｹ繝�繝�逕ｨ縺ｮCC�ｼ�Common Criteria�ｼ芽ｪ榊ｮ夲ｼ�CC-EAL2 for SuSE Linux Enterprise Server 8�ｼ峨′蛻昴ａ縺ｦ蜈ｬ陦ｨ縺輔ｌ縺ｦ縺九ｉ5繝ｶ譛亥ｾ後�ｮ2003蟷ｴ12譛医�√�懊Φ縺ｫ縺ゅｋ繝峨う繝�騾｣驍ｦIT繧ｻ繧ｭ繝･繝ｪ繝�繧｣繧ｪ繝輔ぅ繧ｹ�ｼ�German Federal Office for IT Security縲。SI�ｼ�Bundesamt fﾃｼr Sicherheit in der Informationstechnik�ｼ峨�ｯ蛻･縺ｮ險ｼ譏取嶌繧堤匱陦後＠縺ｾ縺励◆縲４uSE Linux Enterprise Server 8繧ｵ繝ｼ繝薙せ繝代ャ繧ｯ3縺ｯ縲，ommon Criteria for IT Security Evaluation繝舌�ｼ繧ｸ繝ｧ繝ｳ2.1縺ｫ驕ｩ蜷医＠縲´ife Cycle Support�ｼ医Λ繧､繝輔し繧､繧ｯ繝ｫ繧ｵ繝昴�ｼ繝茨ｼ峨→Basic Flaw Remidiation�ｼ亥渕譛ｬ逧�谺�髯･謾ｹ蝟��ｼ峨↓繧医ｊ縲∬ｩ穂ｾ｡菫晁ｨｼ繝ｬ繝吶Ν3�ｼ�EAL3+�ｼ峨ｒ螳溽樟縺励∪縺励◆縲ゆｿ晁ｭｷ繝励Ο繝輔ぅ繝ｼ繝ｫ�ｼ�PP�ｼ峨↓蠕後↓霑ｽ蜉�縺輔ｌ縺滓ｩ溯�ｽ縺ｯ縲・AL3+縺ｮ縲�+縲阪�ｮ驛ｨ蛻�縺ｫ蜿肴丐縺輔ｌ縺ｦ縺�縺ｾ縺吶��

Intel i386繝励Λ繝�繝医ヵ繧ｩ繝ｼ繝��ｼ�IBM xSeries�ｼ峨↓蜉�縺医�・AL3+險ｼ譏取嶌縺ｯ縲∽ｻ悶�ｮ縺吶∋縺ｦ縺ｮIBM eServer繝輔ぃ繝溘Μ繝励Λ繝�繝医ヵ繧ｩ繝ｼ繝��ｼ�i-縺翫ｈ縺ｳpSeries繝励Λ繝�繝医ヵ繧ｩ繝ｼ繝��ｼ�ppc�ｼ峨�】Series�ｼ�s390繝｡繧､繝ｳ繝輔Ξ繝ｼ繝��ｼ峨�√♀繧医�ｳOpteron縺ｨ縺励※遏･繧峨ｌ繧帰MD 64-bit繝励Λ繝�繝医ヵ繧ｩ繝ｼ繝��ｼ�x86_64�ｼ会ｼ峨↓蟇ｾ縺励※繧ら匱陦後＆繧後∪縺励◆縲り｣ｽ蜩√�ｯControlled Access Protection Profile�ｼ�CAPP�ｼ峨↓螳悟�ｨ縺ｫ貅匁侠縺励※隧穂ｾ｡縺輔ｌ縺ｦ縺�縺ｾ縺吶��

CAPP縺ｮ貅匁侠縺ｫ縺ｯ縲ヾUSE繧ｻ繧ｭ繝･繝ｪ繝�繧｣繝√�ｼ繝�繝｡繝ｳ繝舌�ｼ縺ｧ縺ゅｋOlaf Kirch縺翫ｈ縺ｳThomas Biege縺ｫ繧医ｊ螳溯｣�縺輔ｌ縺溽屮譟ｻ繧ｵ繝悶す繧ｹ繝�繝�縺悟ｿ�隕√〒縺励◆縲ゅい繝峨が繝ｳ繧ｽ繝輔ヨ繧ｦ繧ｧ繧｢縺ｯlaus�ｼ�Linux Audit Subsystem: Linux逶｣譟ｻ繧ｵ繝悶す繧ｹ繝�繝��ｼ峨→蜻ｼ縺ｰ繧後�；nu General Public License縺ｮ譚｡莉ｶ縺ｫ蠕薙▲縺ｦ驟榊ｸ�縺輔ｌ縺ｦ縺�縺ｾ縺吶�ゅ％縺ｮ繧ｵ繝悶す繧ｹ繝�繝�縺ｯ險ｭ螳壹′鬮伜ｺｦ縺ｫ蜿ｯ閭ｽ縺ｧ縺ゅｊ縲√す繧ｹ繝�繝�縺ｧ逋ｺ逕溘＠縺溘そ繧ｭ繝･繝ｪ繝�繧｣荳企�崎ｦ√↑繧､繝吶Φ繝医ｒ霑ｽ霍｡�ｼ郁ｨ倬鹸�ｼ峨☆繧区ｩ溯�ｽ繧呈戟縺｣縺ｦ縺�繧九�ｮ縺ｧ縲∝ｮ溯｡御ｸｭ縺ｮ繧ｷ繧ｹ繝�繝�縺ｮ繧ｻ繧ｭ繝･繝ｪ繝�繧｣髱｢縺ｫ蜆ｪ繧後◆騾城℃諤ｧ繧偵ｂ縺溘ｉ縺励∪縺吶�Ｍaus繝代ャ繧ｱ繝ｼ繧ｸ縺ｮ繧ｽ繝ｼ繧ｹ繧ｳ繝ｼ繝峨∈縺ｮ繝ｪ繝ｳ繧ｯ縺ｯ縲√％縺ｮ繧ｵ繧､繝医↓縺ｦ霑第律蜈ｬ髢九＆繧後∪縺吶��

隧穂ｾ｡縺ｯ縲∽ｸ也阜逧�縺ｪ繝ｪ繝ｼ繝�繧｣繝ｳ繧ｰ繝吶Φ繝�縺ｧ縺ゅｊ縲！T繧ｻ繧ｭ繝･繝ｪ繝�繧｣縺ｮ繧ｳ繝ｳ繧ｵ繝ｫ繝�繧｣繝ｳ繧ｰ縺翫ｈ縺ｳ繧ｻ繧ｭ繝･繝ｪ繝�繧｣隧穂ｾ｡莨∵･ｭ縺ｧ縺ゅｋatsec information security GmbH縺ｫ繧医ｊ螳滓命縺輔ｌ縺ｾ縺励◆縲� 蜷檎､ｾ縺ｯ繝峨う繝�縺ｮFederal Office for Information Security�ｼ域ュ蝣ｱ繧ｻ繧ｭ繝･繝ｪ繝�繧｣諡�蠖馴�｣驍ｦ繧ｪ繝輔ぅ繧ｹ縲。undesamt fﾃｼr Sicherheit in der Informationstechnik縲� BSI�ｼ峨↓繧医ｊ讓ｩ髯舌ｒ荳弱∴繧峨ｌ縺ｦ縺�縺ｾ縺吶��IBM Corporation縺ｮ謾ｯ謠ｴ繧貞女縺代◆縺薙�ｮ隧穂ｾ｡繝�繧ｹ繝医�ｯ縲� 繧ｪ繝ｼ繝励Φ繧ｽ繝ｼ繧ｹ繧ｻ繧ｭ繝･繝ｪ繝�繧｣縺ｫ縺翫¢繧九�槭う繝ｫ繧ｹ繝医�ｼ繝ｳ縺ｨ縺ｪ繧区眠縺溘↑谿ｵ髫弱ｒ驕疲�舌＠縺ｾ縺励◆縲�

CC(Common Criteria)縺ｯ縲√が繝壹Ξ繝ｼ繝�繧｣繝ｳ繧ｰ繧ｷ繧ｹ繝�繝�縺ｮ繧ｻ繧ｭ繝･繝ｪ繝�繧｣讖溯�ｽ繧定ｦ∵ｱゅ☆繧九□縺代〒縺ｪ縺上�√が繝壹Ξ繝ｼ繝�繧｣繝ｳ繧ｰ繧ｷ繧ｹ繝�繝�繝吶Φ繝�縺檎｢ｺ遶九☆縺ｹ縺堺ｸ�螳壹�ｮ繝励Ο繧ｻ繧ｹ繧�謇矩��繧ょｿ�隕√→縺励∪縺吶�ゅそ繧ｭ繝･繝ｪ繝�繧｣縺ｮ蟆る摩螳ｶ縺溘■縺ｯ縲√が繝ｼ繝励Φ繧ｽ繝ｼ繧ｹ繧ｳ繝溘Η繝九ユ繧｣縺ｫ縺翫＞縺ｦ螳夂ｾｩ貂医∩縺ｮ繝励Ο繧ｻ繧ｹ繧堤｢ｺ遶九☆繧九％縺ｨ縺悟峅髮｣縺ｧ縺ゅｋ縺ｨ縺�縺�逅�逕ｱ縺ｧ縲√が繝ｼ繝励Φ繧ｽ繝ｼ繧ｹ繧ｪ繝壹Ξ繝ｼ繝�繧｣繝ｳ繧ｰ繧ｷ繧ｹ繝�繝�繧辰C縺ｫ蠕薙▲縺ｦ隱榊ｮ壹☆繧九％縺ｨ縺ｫ逍大ｿｵ繧呈干縺上％縺ｨ縺後≠繧翫∪縺励◆縲�2004蟷ｴ7譛医↓EAL2險ｼ譏取嶌縺檎匱陦後＆繧後◆蠕後�，APP�ｼ�Controlled Access Protection Profile: 蛻ｶ蠕｡縺輔ｌ縺溘い繧ｯ繧ｻ繧ｹ菫晁ｭｷ繝励Ο繝輔ぅ繝ｼ繝ｫ�ｼ峨↓螳悟�ｨ縺ｫ貅匁侠縺励◆譁ｰ縺溘↑EAL3+險ｼ譏取嶌縺檎匳蝣ｴ縺励�√が繝ｼ繝励Φ繧ｽ繝ｼ繧ｹ繧ｽ繝輔ヨ繧ｦ繧ｧ繧｢縺後＆繧峨↓鬮倥＞菫晁ｨｼ繝ｬ繝吶Ν繧帝＃謌舌〒縺阪ｋ縺薙→縺檎､ｺ縺輔ｌ縺ｾ縺励◆縲�

CC�ｼ�Common Criteria�ｼ�縺翫ｈ縺ｳSLES8隧穂ｾ｡縺ｫ縺､縺�縺ｦ縺ｯ

Common Criteria for IT Security Evaluation�ｼ�IT繧ｻ繧ｭ繝･繝ｪ繝�繧｣隧穂ｾ｡逕ｨ蜈ｱ騾壼渕貅厄ｼ�縺ｯ縲！T繧ｻ繧ｭ繝･繝ｪ繝�繧｣隧穂ｾ｡縺ｮ蜴溷援縺ｨ繧ｳ繝ｳ繧ｻ繝励ヨ繧呈署萓帙＠縺ｦ縺�縺ｾ縺吶�ゅ％縺ｮ隧穂ｾ｡縺ｮ逶ｮ逧�縺ｯ縲！T陬ｽ蜩√�ｮ繧ｻ繧ｭ繝･繝ｪ繝�繧｣髱｢縺ｮ菫｡鬆ｼ諤ｧ繧貞ｮｹ譏薙↓貂ｬ螳壹♀繧医�ｳ豈碑ｼ�縺吶ｋ縺溘ａ縺ｮIT繧ｻ繧ｭ繝･繝ｪ繝�繧｣隧穂ｾ｡謇区ｳ輔ｒ讓呎ｺ門喧縺励�！T陬ｽ蜩√�ｮ繧ｻ繧ｭ繝･繝ｪ繝�繧｣縺ｫ縺翫¢繧区ｶ郁ｲｻ閠�縺ｮ菫｡鬆ｼ諤ｧ縺ｮ蜷台ｸ翫↓雋｢迪ｮ縺吶ｋ縺薙→縺ｧ縺吶��

迢ｬ遶狗ｳｻ縺ｮ隱榊庄繧貞女縺代◆隧穂ｾ｡繝ｩ繝懊�ｯ縲∽ｿ晁ｭｷ繝励Ο繝輔ぅ繝ｼ繝ｫ縲√そ繧ｭ繝･繝ｪ繝�繧｣逶ｮ讓吶�√♀繧医�ｳ隧穂ｾ｡菫晁ｨｼ繝ｬ繝吶Ν�ｼ�EAL�ｼ峨↓繧医ｊ險ｭ螳壹�∝ｮ夂ｾｩ縺輔ｌ縺溯ｦ∽ｻｶ縺ｫ蠕薙▲縺ｦ隧穂ｾ｡繧貞ｮ滓命縺励∪縺吶�りｩ穂ｾ｡繝ｩ繝懊�ｯ縲・TR�ｼ�Evaluation Technical Reports: 隧穂ｾ｡謚�陦薙Ξ繝昴�ｼ繝茨ｼ峨ｒ菴懈�舌＠縲∬ｪ榊ｮ壼屮菴薙↓謠仙�ｺ縺励∪縺吶�ゅ◎縺ｮ蠕後�∝嵜髫帷噪縺ｫ隱榊庄繧貞女縺代※縺�繧九％縺ｮ隱榊ｮ壼屮菴薙�ｯ縲∬ｩ穂ｾ｡螳滓命閠�縺碁←蛻�縺ｫ隧穂ｾ｡繧貞ｮ溯｡後＠縺ｦ縺�繧九°縺ｩ縺�縺九ｒ讀懆ｨｼ縺励�・TR縺ｫ險倩ｼ峨＆繧後※縺�繧玖ｨｼ諡�繧偵メ繧ｧ繝�繧ｯ縺励∪縺吶�ゅ☆縺ｹ縺ｦ縺ｮ隕∽ｻｶ縺梧ｺ�縺溘＆繧後※縺�繧句�ｴ蜷医�∬ｪ崎ｨｼ蝗｣菴薙�ｯ險ｼ譏取嶌繧堤匱陦後〒縺阪∪縺吶��

SUSE Linux Enterprise Server 8縺窪valuation Assurance Level 3縺ｫ蝓ｺ縺･縺�縺ｦ隱崎ｨｼ縺輔ｌ繧句�昴�ｮ繧ｪ繝ｼ繝励Φ繧ｽ繝ｼ繧ｹ繧ｪ繝壹Ξ繝ｼ繝�繧｣繝ｳ繧ｰ繧ｷ繧ｹ繝�繝�縺ｨ縺ｪ繧翫�√％縺ｮ隱榊ｮ壹�ｯ繧ｪ繝ｼ繝励Φ繧ｽ繝ｼ繧ｹ繧ｽ繝輔ヨ繧ｦ繧ｧ繧｢縺ｮ繧｢繝励Μ繧ｱ繝ｼ繧ｷ繝ｧ繝ｳ蛻�驥弱↓譁ｰ縺溘↑荳也阜繧貞��繧企幕縺上％縺ｨ縺ｨ縺ｪ繧翫∪縺励◆縲ゅ％縺ｮ隱榊ｮ壹�ｯ縲√�瑚｣ｽ蜩√�阪♀繧医�ｳ縲後�吶Φ繝�縺ｮ髢狗匱縲√Γ繝ｳ繝�繝翫Φ繧ｹ縲√し繝昴�ｼ繝医�励Ο繧ｻ繧ｹ縲阪�ｮ蜿梧婿縺ｮ豕穂ｺｺ蟶ょ�ｴ縺ｫ驕ｩ蜷域�ｧ縺ｮ險ｼ譏弱ｒ遉ｺ縺吶ｂ縺ｮ縺ｧ縺ゅｊ縲∵里蟄倥�ｮ繧ｪ繝壹Ξ繝ｼ繝�繧｣繝ｳ繧ｰ繧ｷ繧ｹ繝�繝�縺九ｉSUSE Linux Enterprise Server縺ｸ縺ｮ遘ｻ陦後ｒ閠�縺医※縺�繧倶ｼ∵･ｭ縺ｮ謚戊ｳ�繝ｪ繧ｹ繧ｯ繧定ｻｽ貂帙＠縺ｾ縺吶��

CC-CAPP/EAL3+險ｼ譏取嶌縺ｮ蜿門ｾ励�ｯ縲ヾUSE縺ｮ繧ｻ繧ｭ繝･繝ｪ繝�繧｣縺翫ｈ縺ｳ繧ｻ繧ｭ繝･繝ｪ繝�繧｣隧穂ｾ｡縺ｸ縺ｮ蜿悶ｊ邨�縺ｿ繧貞ｼｷ縺冗､ｺ縺吶ｂ縺ｮ縺ｧ縺吶�� 縺薙�ｮ蜿悶ｊ邨�縺ｿ縺ｯ縲� 繧ｻ繧ｭ繝･繝ｪ繝�繧｣縺ｯ迥ｶ諷九〒縺ｯ縺ｪ縺上�励Ο繧ｻ繧ｹ縺ｨ縺励※縺ｿ縺ｪ縺輔ｌ繧九∋縺阪〒縺ゅｋ縺ｨ縺�縺�Novell縺ｮ隱崎ｭ倥ｒ陦ｨ縺励※縺�縺ｾ縺吶�� 繧ｻ繧ｭ繝･繝ｪ繝�繧｣隧穂ｾ｡蛻�驥弱↓縺翫¢繧区ｬ｡縺ｮ繧ｹ繝�繝�繝励→縺ｪ繧九�ｮ縺ｯ縲� 2004蟷ｴ蠕悟濠縺ｫ莠亥ｮ壹＆繧後※縺�繧玖ｩ穂ｾ｡菫晁ｨｼ繝ｬ繝吶ΝEAL4+縺ｸ縺ｮ蠑ｷ蛹悶〒縺吶��

縺昴�ｮ莉悶�ｮ繝ｪ繧ｽ繝ｼ繧ｹ:

SLES8繧定ｪ榊ｮ壹＆繧後◆險ｭ螳壹↓螟画峩縺吶ｋ縺ｫ縺ｯ縲�縲後そ繧ｭ繝･繝ｪ繝�繧｣繧ｬ繧､繝峨�搾ｼ�pdf�ｼ�繧貞盾辣ｧ縺励※縺上□縺輔＞縲�

縲後そ繧ｭ繝･繝ｪ繝�繧｣逶ｮ讓吶�搾ｼ�pdf�ｼ�繧偵♀隱ｭ縺ｿ縺上□縺輔＞縲� 縲後そ繧ｭ繝･繝ｪ繝�繧｣逶ｮ讓吶�阪�ｯ縲。SI Web繧ｵ繧､繝医°繧峨ｂ蜿ら�ｧ縺ｧ縺阪∪縺吶��

PDF譁�譖ｸ縺ｨ縺励※蜈･謇句庄閭ｽ縺ｪ縲梧ｩ溯�ｽ莉墓ｧ倥�搾ｼ�pdf�ｼ�縺翫ｈ縺ｳ縲碁ｫ伜ｺｦ縺ｪ險ｭ險医�搾ｼ�pdf�ｼ�繧偵♀隱ｭ縺ｿ縺上□縺輔＞縲�

LAus�ｼ�Linux Audit Sybsystem: Linux逶｣譟ｻ繧ｵ繝悶す繧ｹ繝�繝��ｼ峨�ｮ繧ｽ繝ｼ繧ｹ繧ｳ繝ｼ繝�

IBM縺ｮ繧ｻ繧ｭ繝･繝ｪ繝�繧｣/證怜捷蛹妨eb繧ｵ繧､繝�

縲瑚ｪ榊ｮ壹Ξ繝昴�ｼ繝医�搾ｼ�pdf�ｼ�縺ｯ縲�BSI Web繧ｵ繧､繝�縺ｫ縺ｦ蜈ｬ髢九＆繧後※縺�縺ｾ縺吶��

BSI縺ｯ縲ヾUSE Linux Enterprise Server 8縺ｮ隱榊ｮ壹↓縺､縺�縺ｦ縲�繝励Ξ繧ｹ逋ｺ陦ｨ譁�繧貞�ｬ髢九＠縺ｦ縺�縺ｾ縺吶�ゅ％縺ｮ逋ｺ陦ｨ譁�縺ｯ繝峨う繝�隱槭�ｮ縺ｿ縺ｧ險倩ｼ峨＆繧後※縺�縺ｾ縺吶��