Argus C2 Trusted Mode Workstation/Server C2/TMW

Required components:

• SunSoft Solaris 2.4 or higher Network Operating Environment
• Argus Enhanced C2+ Security Foundation
• Argus Trusted Desktop Environment Module

Commercial Solaris 2.x, as delivered by SunSoft, Inc. is designed to meet a basic level of C2 operating system security functionality and assurance based upon user discretion and operation in a character-based (non X Window) mode of operation. For users who do not work with SunSoft's OpenWindows® and ONC+ networking, or who do not need the assurance of evaluated and certified system security, this is perhaps a sufficient level of security. However, building a C2 distributed windowing system around a C2 kernel, but failing to satisfy the C2 security requirements of discretionary access control, identification & authentication, and system audit security mechanisms in the networking and X windowing subsystems, leaves system security weaknesses and vulnerabilities which can be exploited by malicious users.

The Argus Trusted Mode Workstation is a trusted X Window-based, single-level platform designed to meet the published criteria for C2 security in both the operating system and the X Window system. The X Window subsystem used with the C2/TMW is virtually the same Trusted Desktop subsystem used in the high-security B1/CMW product. The Argus C2/TMW provides C2+ level of trust for the complete platform and includes additional security features found at B1, B2, and B3 security levels.

Security features provided with the Argus C2/TMW include:

• all of the features of Argus Enhanced C2+ Security Foundation
• standard root privilege mechanism restrained by secure root authorizations
• standard superuser privileges replaced by least privilege mechanism
• floating information labels
• color-coded X Window borders
• OpenLook and Motif GUI support
• secure system- and security-administration GUI
• trusted PostScript labeled printing

New Features of Release 1.3

• Support for SunSoft x86 video driver updates
• Argus trusted NFS interoperability support for NFS-based systems
• Solairs jumbo kernel patch support (revision 35)
• Support for TSIX(RE) industry standard secure networking protocols
• Support for trusted network utilities including "r" commands, ftp, telnet, and Unix mail
• Symmetric multiprocessor support
• Support for remote XWindow display with untrusted hosts
• Audit enhancements for printing, label change, and window cut/paste
• Labelled printing enhancements for remote printing and site defined banner/trailer configuration
• Support for Solaris NIS+
• Improved Wabi support including support for Wabi version 2.2

When combined with Argus Secure Networking, the C2/TMW provides full C2 level security in the Solaris 2.x kernel, OpenWindows, and ONC+ networking.

The Argus C2/TMW Release 1.2 for Solaris 2.4 has completed the ITSEC security evaluation program in the United Kingdom and has been certified to the functionality level F-C2 and assurance level E-3. The configuration which was evaluated included a networked configuration of two Solaris 2.4-based C2/TMW systems: an Intel Pentium, the other a Sun SPARC. These systems are networked via Argus Secure Networking and both provide DOS/Windows application support.

The Argus C2/TMW Release 1.3 for Solaris 2.4 has been submitted for evaluation to the following security evaluation criteria.

Evaluated Configuration	Argus C2 Trusted Mode Workstation
Solaris 2.x base system and platforms	SunSoft Solaris 2.4 SunSoft Wabi 2.2 SPARC, Pentium
Evaluation Level	Information Technology Security Evaluation Criteria (ITSEC) C2 level security functionality E3 level assurance