Editing Trusted operating system

{{Short description|Operating system with support for multilevel security}}
'''Trusted Operating System''' ('''TOS''') generally refers to an [[operating system]] that provides sufficient support for [[multilevel security]] and evidence of correctness to meet a particular set of government requirements.

The most common set of criteria for trusted operating system design is the [[Common Criteria]] combined with the [[Security Functional Requirements]] (SFRs) for Labeled Security Protection Profile (LSPP) and [[mandatory access control]] (MAC). The Common Criteria is the result of a multi-year effort by the governments of the U.S., Canada, United Kingdom, France, Germany, the Netherlands and other countries<ref>List of member of the Common Criteria Recognition Arrangement: http://www.commoncriteriaportal.org/ccra/members/</ref> to develop a harmonized security criteria for IT products.

==Examples==
Examples of certified trusted operating systems are:
* Apple Mac OS X 10.6 (Rated EAL 3+<ref>Common Criteria certification report http://www.commoncriteriaportal.org/files/epfiles/0536a_pdf.pdf</ref>) 
* [[HP-UX|HP-UX 11i v3]] (Rated EAL 4+)
* Some [[Linux]] distributions (Rated up to EAL 4+)
* Microsoft Windows 7 and Microsoft Server 2008 R2 (Rated EAL 4+<ref>Common Criteria certification report http://www.commoncriteriaportal.org/files/epfiles/st_vid10390-vr.pdf</ref>)
* AIX 5L with PitBull Foundation (Rated EAL 4+<ref>List of AIX certifications on [https://web.archive.org/web/20081204033521/http://www-03.ibm.com/systems/power/software/aix/certifications/index.html]</ref>)
* [[Trusted Solaris]]
* Trusted UNICOS 8.0 (Rated B1<ref>{{Cite web | url=http://www.dsd.gov.au/infosec/epl/index_details.php?product_id=MjE0IyMjMjEzLjIxMy4yNDYuMjE3 |title = Australian Signals Directorate}}</ref>)
* [[XTS-400]] (Rated EAL5+<ref>Common Criteria Certification report http://www.commoncriteriaportal.org/files/epfiles/st_vid10293-vr.pdf</ref>)
* [[VM (operating system)|IBM VM (SP, BSE, HPO, XA, ESA, etc.)]] with [[Resource Access Control Facility|RACF]]

Examples of operating systems that might be certifiable are:
* [[FreeBSD]] with the TrustedBSD extensions<ref>FreeBSD statement about support of Common Criteria requirements : {{cite web |url=http://www.freebsd.org/doc/en/articles/linux-comparison/freebsd-support.html |title=Support |accessdate=2011-11-19 |url-status=dead |archiveurl=https://web.archive.org/web/20120331193226/http://www.freebsd.org/doc/en/articles/linux-comparison/freebsd-support.html |archivedate=2012-03-31 }}</ref> 
* [[SELinux]] (see [http://www.nsa.gov/research/selinux/faqs.shtml#I12 FAQ])

Companies that have created trusted operating systems include:
* [[Addamax]] (BSD, SVR3, SVR4, HP/UX)
* [[Argus Systems Group]] (Solaris, AIX, Linux)
* [[AT&T Corporation|AT&T]] (System V)
* [[BAE Systems]] (XTS Unix)
* [[Groupe_Bull|Bull]] (AIX)
* [[Data General]] (DG/UX)
* [[Digital Equipment Corporation]] (Ultrix)
* [[Forcepoint]] (Hardened SELinux)
* [[Gemini Computers]] (GEMSOS)
* [[General Dynamics C4 Systems]] (Linux)
* [[Harris Corporation]] (SVR3, SVR4)
* [[Hewlett-Packard]] (HP/UX)
* [[Honeywell]] (Multics)
* [[IBM]] (OS/390, AIX)
* [[SCO Group|SCO]] (SCO Unix)
* [[Secure Computing Corporation]] (LOCK, Mach, BSD)
* [[SecureWare]] (Apple A/UX, HP/UX, SCO)
* [[Sequent Computer Systems]] (Dynix/ptx)
* [[Silicon Graphics]] (IRIX)
* [[Sun Microsystems]] (SunOS, Solaris)
* [[Trusted Information Systems]] (Xenix, Mach)

== See also ==
*[[Common Criteria]]
*[[Comparison of operating systems]]
*[[Security-evaluated operating system]]
*[[Security-focused operating system]]

==References==
{{reflist}}

== External links ==
* [http://www.commoncriteriaportal.org/products/ Common Criteria Portal - certified products]
* [http://www.nsa.gov/research/selinux/faqs.shtml NSA FAQ on SELinux]
* [http://www.argus-systems.com/ Argus Systems]

[[Category:Operating system security]]