NT's C2 rating
Derek Atkins
warlord at MIT.EDU
Thu Mar 21 16:05:58 PST 1996
> configuration can be certified as C2 compliant. The way I read the orange
> book, no system with a network connection can ever be C2. For that matter a
> system can't get C2 unless it is in an area where you can control and
> monitor physical access to the system.
This is incorrect -- you can have a C2 system which has a network
connection. Indeed, you can get a B2 rating with a networked system,
c.f. Multics.
-derek
More information about the cypherpunks-legacy
mailing list