I-0334: Output Beginning/End Labels Required

NUMBER:               I-0334
STATUS:               Sent to CCEVS Management and CCIMB for Review

TITLE:                Output Beginning/End Labels Required

FIRST POST:            [criteria 2165]
MOST RECENT REPOST:    [criteria 2200]

REQUIREMENT:          Labeling Human Readable Output
CRITERIA CLASSES:     B1, B2, B3, A1
DOCUMENT(S):          Trusted Facility Manual
RELATED TO:
     I-0039           Multilevel Printers And Page Labeling
     I-0040           Requirements For Overwrite Label Capability

STATEMENT:

The following interprets the requirement that ``The TCB shall mark the beginning and end of all human-readable, paged, hardcopy output (e.g., line printer output) with human-readable sensitivity labels that properly represent the sensitivity of the output.''

The TCB shall not provide any mechanism that allows suppression of the marking of the beginning and end of ``human-readable, paged, hardcopy output'' with appropriate human-readable sensitivity labels.

PROJECTED IMPACT:

Negligible impact anticipated.

SUPPORT:

The wording in the TCSEC for the mandatory marking is ``...shall mark...''. In contrast, the wording regarding internal page labels is ``...shall, by default, mark...'', with a note that ``Any override of these marking defaults shall be auditable...''. The implication is that markings at the beginning and end of hardcopy output are not suppressible; they must always be present. Minimally, they could be the marking at the top of the first page and the marking at the bottom of the last page; however, these minimal markings must be present and non-suppressible.

If a product provides a mechanism to selectively suppress marking the beginning and end of hardcopy output on a multilevel printer, said mechanism must be disabled in order to meet the requirement. The TFM must provide instructions to the administrator on how to configure the product to disable the mechanism, along with adequate warnings that if the mechanism is not disabled, the product is running in an unrated configuration.