[CentOS] CENTOS not DoD approved

Tue Apr 28 23:05:04 UTC 2015
Akemi Yagi <amyagi at gmail.com>

On Tue, Apr 28, 2015 at 3:10 PM, Johnny Hughes <johnny at centos.org> wrote:

> CentOS is not approved for DOD use.  In fact, CentOS is not now, nor has
> it ever been *certified* for anything.  Certifications require people to
> PAY to certify a product.
>
> Specifically, EAL4 Certification, a requirement for the DOD, costs up to
> 2.5 million dollars .. see this link:
>
> http://en.wikipedia.org/wiki/Evaluation_Assurance_Level#Impact_on_cost_and_schedule
>
> That cost would be for each main version of CentOS (2.1, 3, 4, 5, 6, and
> 7) .. so the cost to have all 6 previous major versions certified would be:
>
> 6 x $2.5 Million =  $15 Million dollars.
>
> Since CentOS is given away for free ... I can't afford to pay 15 million
> dollars to have it EAL4 certified .. can anyone on this list?
>
> Certifications and security testing and assurance, along with a Service
> Level Agreement for fixing bugs is why people who require any of those
> things need to buy RHEL.

Incidentally, someone has just started a thread related to DoD in the
RH community discussion session entitled, "A DoD version of RHEL - A
money maker for RH? Maybe!" :

https://access.redhat.com/comment/913243

Akemi