"Last February, Red Hat and Oracle jointly announced cooperation
to obtain Common Criteria (CC) certification for the Red Hat
Advanced Server operating system and the Oracle 9i Release 2
database running on that platform. But at LinuxWorld last week, IBM
and SuSE revealed their achievement (LWN) of CC Enterprise
Assurance Level 2+ (EAL2+) certification first, with SuSE Linux
Enterprise Server 8 on the IBM xSeries platforms, thus beating Red
Hat and Oracle to this critical security milestone.
"Rumor is that Red Hat's Common Criteria certification effort is
stalled, held up indefinitely by the UK-based testing laboratory
Red Hat selected to do the work. The UK lab's certification board
reportedly hasn't even met as yet to review and approve Red Hat's
CC EAL2 testing proposal and plan, incurring several months of all
too typical bureaucratic delay.
"Compounding this situation, Red Hat Advanced Server was granted
a Common Operating Environment (COE) certification this year by the
US Department of Defense (DoD), but SuSE Linux Enterprise Server
isn't anticipated to gain equivalent COE certification from the US
DoD for several months..."