This article is from the Computer Security Evaluation FAQ, by Trusted Product Evaluation Program TPEP@dockmaster.ncsc.mil.
There are a number of evaluated products conforming to one or
another of the UNIX interface standards (see Section V,
Question 3). These products range from class C2 to class B3.
In general, unevaluated UNIX products lack several features,
including sufficient auditing, to achieve anything other than a
D class rating without some modification.
 
Continue to: