Assurance Activity

TSS

The evaluator shall examine the TSS to ensure it describes the behavior of the TSF when the audit trail cannot be written to.  The evaluator shall ensure the TSS describes where the audit trail is stored (locally, remotely, or both); how the TSF detects audit full conditions if the audit trail is stored locally; whether and how the TSF detects audit full conditions for remote audit repositories; and how the TSF detects loss of communication with external audit repositories (if using an external audit server).  The evaluator shall also ensure the TSS describes what actions can be performed by the Auditor, if any, in each case where the audit trail cannot be written.

Guidance

The evaluator shall examine the operational guidance to ensure it describes what conditions result in the audit trail not being able to be written to, and how an Auditor recognizes that such a condition has occurred. The evaluator shall also examine the operational guidance to ensure it includes remedial steps for correcting such issues.

Test

The evaluator shall perform the following tests.  The tests are conditional on where the audit data are being stored.  Test 1 demonstrates the capability of the TOE to react to an indication that the repository is full; this is always applicable if the audit data are stored locally (either within the TOE boundary or on the TOE platform).  If the TOE has a means to detect that a remote audit repository is full, then this test will be run for those types of TOEs as well. Test 2 is only executed in cases where an external repository is supported, and tests the ability of the TOE to detect when the connection to the repository becomes unavailable.

·         Test 1 (conditional): The evaluator shall cause the audit trail to become full, verify that the TSF behaves as documented in the TSS, and verify that a privileged user can perform the documented remedial steps.

·         Test 2 (conditional): If the TOE uses a remote repository in the Operational Environment to store audit data, the evaluator shall cause the audit trail to become unavailable, verify that the TSF behaves as documented in the TSS, and verify that a privileged user can perform the documented remedial steps.

Equivalency

Testing of the TOE may be performed on a subset of the platforms listed in the TOE's ST. Justification must be provided for those platforms that were excluded from testing.