Introduction This directory contains the packages and the documentation required to install and configure Red Hat Enterprise Linux 4 Update 2 (RHEL4-U2) on a specific set of HP platforms to an evaluated level. This level meets the Common Criteria Controlled Access Protection Profile (CAPP) at Assurance Level 3+ (EAL3+). This evaluation was conducted by an independent evaluator, atsec Information Security (http://www.atsec.com/), using the Common Criteria methodology (http://www.commoncriteriaportal.org/) and validated by the Common Criteria Evaluation and Validation Scheme (CCEVS) Validation Body of the U.S. Government (http://niap.nist.gov/cc-scheme). For more information regarding the Common Criteria Evaluation process and Protection Profiles, Web URLs are provided at the end of this file. Purpose The purpose of this README is to guide the reader on how to obtain the Evaluation Configuration Guide (ECG) in order to use its instructions. The (ECG) is contained in the capp-eal3-config-hp-1.6-1.EL4.noarch.rpm RPM package. The ECG lists the requirements and describes how to install and configure a RHEL4-U2 system to be compliant with the Controlled Access Protection profile (CAPP). The ECG file RHEL-CAPP-EAL3-HP-Configuration-Guide is included in the following rpm: ftp://partners.redhat.com/EAL3_RHEL4/HP/noarch/capp-eal3-config-hp-1.6-1.EL4.noarch.rpm To get the ECG do the following: 1- From an existing Internet-connected system equipped with the rpm or rpm2cpio package management tools, download capp-eal3-config-hp-1.6-1.EL4.noarch.rpm from the above ftp directory: wget ftp://partners... (use FTP URL above) 2- Run as root at a command line: rpm -i capp-eal3-config-hp-1.6-1.EL4.noarch.rpm This will only install the ECG and a set of kickstart files. Alternatively, run: rpm2cpio capp-eal3-config-hp-1.6-1.EL4.noarch.rpm | cpio -id to unpack the archive contents in the current directory without installing them. This does not require administrator rights. 3- The ECG file RHEL-CAPP-EAL3-HP-Configuration-Guide is included in multiple formats: as man page, pdf, pod and txt. You can find the various formats in directory /usr/share/doc/capp-eal3-config-hp-1.6. 4- Read the ECG and follow the instructions carefully. The ECG describes how to obtain and the required software packages and describes various installation methods. Related Links http://www.atsec.com/ http://www.hp.com/ http://www.redhat.com/ http://commoncriteriaportal.org/ http://niap.nist.gov/cc-scheme http://niap.nist.gov/cc-scheme/pp/PP_CAPP_V1.d.html