nanog mailing list archives

RE: bloomberg on supermicro: sky is falling


From: "Scott Weeks" <surfer () mauigateway com>
Date: Wed, 10 Oct 2018 14:24:44 -0700



--- SNaslund () medline com wrote:
From: "Naslund, Steve" <SNaslund () medline com>

You are free to disagree all you want with the default 
deny-all policy but it is a DoD 5200.28-STD requirement 
and NSA Orange Book TCSEC requirement.  It is baked into 
all approved secure operating systems including SELINUX 
so it is really not open for debate if you have meet 
these requirements.  
-------------------------------------------------------


I believe you need to specify what type of DoD networks 
you're talking about.  NIPR is not default deny.

scott


Current thread: