Tell me more ×
IT Security Stack Exchange is a question and answer site for IT security professionals. It's 100% free, no registration required.
up vote -1 down vote favorite

I have read through the document found at,

NSA RHEL5 Security Requirements

In reading through the document, it seems that you can use any version of RHEL 5 as long as it supports the requirements in the document. Is there any other document out there that says that RHEL 5.3 is the only supported version of RHEL 5 by the NSA? If so links to the document would be greatly appreciated.

share|improve this question
1  
You mean if it's passing all security clearances, then yes RHEL5 is the only government approved version, RHEL 6 might still not have all of them as required by U.S. government, however it can be used in business no problem, as it's kernel it's pretty much stable as it seems. – Andrew Smith Jul 24 '12 at 20:15
1  
And this is pretty much generic guide how to setup linux in a way it's not completely naive. – Andrew Smith Jul 24 '12 at 20:22

1 Answer

up vote 2 down vote

This page at RedHat's site seem to have the most current information available on public sites and suggests a RHEL6 standard may be available in November 2012:

http://www.redhat.com/solutions/industry/government/certifications.html#Require

As far as I can tell from the STIG itself at the linked site, the version of RH5 is not relevant to the requirement:

http://iase.disa.mil/stigs/os/unix/red_hat.html

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.