I was talking to a government guy today about the possibility of adding RHEL to a PL2 network and he was saying that he's never heard of any UNIX in a government PL2. He said that that ability of the auditd did not go far enough when it came to reporting failed actions. For instance, if I were to try and ls a directory that I have no access too, it doesn't report that. I tested it and he's right. It still sounds hard to believe. He also told me that Windows was much more secure.

Anyway, just wonder what the thoughts some of you had about that and if some of you actually support Linux in a need-to-know environment.

Emphasis mine, as in no idea how knowledgeable this "government guy" is.


Depends on the rule set.


Not unless configured to do so.


Neither BSD, Windows or Linux are configured out of the box to do so.


If this "government guy" is into formal auditing and based on EAL, CC, PL details then fine, otherwise it's typical flame bait I'd say since "more secure" on its own is devoid of meaning.