down they go

plug-discuss@lists.plug.phoenix.az.us plug-discuss@lists.plug.phoenix.az.us
Thu, 23 May 2002 16:15:01 -0700


Any of you heard of NSA-Security Linux? It's a heavy patch to secure the
kernel from the NSA themselves. I'm pretty sure the NSA have looked at it. =o)

On Thu, May 23, 2002 at 06:57:24PM -0400, Carl Parrish wrote:
> I think someone got their info wrong. I know for a fact that there has been security testing of Linux by the NSA. (not sure of the outcome however). 
> 
> Carl Parrish
> ============================================================
> From: "John (EBo) David" <ebo@leml.la.asu.edu>
> Date: 2002/05/23 Thu PM 06:06:01 EDT
> To: plug-discuss@lists.plug.phoenix.az.us
> Subject: Re: down they go
> 
> >From the article:
> 
> "Stenbit said that the debate is academic and that what matters is how
> secure a given piece of software is. To that end, the Defense Department
> is now prohibited from purchasing any software that has not undergone
> security testing by the NSA. Stenbit said he is unaware of any
> open-source software that has been tested." 
> 
> and yet earlier in the article they state:
> 
> "The Mitre report said open-source software "plays a more critical role
> in the DOD than has been generally recognized."
> 
> The report identified 249 uses of open-source systems and tools,
> including running a Web portal for the Defense Intelligence Agency,
> running network security for the Army command in Europe and support for
> numerous Air Force Computer Network Defense tools."
> 
> 
> if it is the case that the NSA is not testing open-source software but
> only commercial, AND the DD is not allowed to use any software not
> tested by NSA, I want to know why.
> 
> Looks like we should all write the post asking them to follow up on
> it...
> 
>   EBo --
> ________________________________________________
> 
> 
> ________________________________________________
> See http://PLUG.phoenix.az.us/navigator-mail.shtml if your mail doesn't post to the list quickly and you use Netscape to write mail.
> 
> PLUG-discuss mailing list  -  PLUG-discuss@lists.plug.phoenix.az.us
> http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss