Product Description:
\r\nArchon OS is an operating system (OS) based on Red Hat Enterprise Linux (RHEL) v8.10 that supports multiple users, user permissions, access controls, and cryptographic functionality.
\r\nArchon OS is an ostree-based packaging of Red Hat Enterprise Linux (RHEL), tailored for deployment on End User Devices (EUDs) specifically designed for Commercial Solutions for Classified (CSfC) solutions. The Archon OS ostree incorporates unmodified versions of the RHEL RPMs. Archon OS is curated to incorporate solely the essential OS options and applications pertinent to EUD functionality, with non-applicable components deliberately excluded.
\r\nThe TOE is a general-purpose operating system (OS), that supports multiple users, user permissions, access controls, and cryptographic functionality.
\r\nThe TOE is a software TOE and has been evaluated on the following host platforms.
\r\nTable 1 – Archon OS v3.0.0.2 Hardware Platforms (EUDs)
\r\n| \r\n Vendor \r\n | \r\n\r\n Model \r\n | \r\n\r\n CPU \r\n | \r\n\r\n CPU Microarchitecture \r\n | \r\n\r\n CPU Family \r\n | \r\n
| \r\n \r\n Dell Inc. \r\n\r\n \r\n \r\n | \r\n\r\n Latitude 5400 \r\n | \r\n\r\n Intel® Core™ i5-8365U \r\n | \r\n\r\n Skylake \r\n | \r\n\r\n Whiskey Lake \r\n | \r\n
| \r\n Latitude 5410 \r\n | \r\n\r\n Intel® Core™ i7-10810U \r\n | \r\n\r\n Skylake \r\n | \r\n\r\n Comet Lake \r\n | \r\n|
| \r\n Latitude 5430 \r\n | \r\n\r\n Intel® Core™ i7-1255U \r\n | \r\n\r\n Golden Cove \r\n | \r\n\r\n Alder Lake \r\n | \r\n|
| \r\n Precision 3260 \r\n | \r\n\r\n Intel® Core™ i7-12700 \r\n | \r\n\r\n Golden Cove \r\n | \r\n\r\n Alder Lake \r\n | \r\n|
| \r\n Precision 3570 \r\n | \r\n\r\n Intel® Core™ i7-1255U \r\n | \r\n\r\n Golden Cove \r\n | \r\n\r\n Alder Lake \r\n | \r\n|
| \r\n Latitude 5440 \r\n | \r\n\r\n Intel® Core™ i5-1335U \r\n | \r\n\r\n Raptor Cove \r\n | \r\n\r\n Raptor Lake \r\n | \r\n|
| \r\n Latitude 5540 \r\n | \r\n\r\n Intel® Core™ i5-1335U \r\n | \r\n\r\n Raptor Cove \r\n | \r\n\r\n Raptor Lake \r\n | \r\n|
| \r\n Precision 3580 \r\n | \r\n\r\n Intel® Core™ i5-1350P \r\n | \r\n\r\n Raptor Cove \r\n | \r\n\r\n Raptor Lake \r\n | \r\n
The diagram below depicts a representative TOE deployment.
\r\nFigure 1: Representative TOE Deployment
\r\n\r\n
The following items are required for the operational environment.
\r\nTable 2: Hardware and Software Environmental Components
\r\n| \r\n Components \r\n | \r\n\r\n Mandatory/ \r\nOptional \r\n | \r\n\r\n Description \r\n | \r\n
| \r\n End User Device (EUD) \r\n | \r\n\r\n Mandatory \r\n | \r\n\r\n The hardware runs the TOE (software). The evaluated systems are identified in Table 1 above. \r\n | \r\n
| \r\n Update Server \r\n | \r\n\r\n Mandatory \r\n | \r\n\r\n Provides the ability to check for TOE software updates TOE as well as providing signed updates. The TOE communicates with the Update Server using HTTPS over TLS. \r\n | \r\n
| \r\n Remote Servers \r\n | \r\n\r\n Mandatory \r\n | \r\n\r\n Servers that support multiple applications and provide multiple services. \r\n | \r\n
\r\n
","evaluation_configuration":"
The TOE is a software TOE and has been evaluated on the following host platforms.
\r\nTable 2 – Archon OS v3.0.0.2 Hardware Platforms (EUDs)
\r\n| \r\n Vendor \r\n | \r\n\r\n Model \r\n | \r\n\r\n CPU \r\n | \r\n\r\n CPU Microarchitecture \r\n | \r\n\r\n CPU Family \r\n | \r\n
| \r\n \r\n Dell Inc. \r\n\r\n \r\n \r\n | \r\n\r\n Latitude 5400 \r\n | \r\n\r\n Intel® Core™ i5-8365U \r\n | \r\n\r\n Skylake \r\n | \r\n\r\n Whiskey Lake \r\n | \r\n
| \r\n Latitude 5410 \r\n | \r\n\r\n Intel® Core™ i7-10810U \r\n | \r\n\r\n Skylake \r\n | \r\n\r\n Comet Lake \r\n | \r\n|
| \r\n Latitude 5430 \r\n | \r\n\r\n Intel® Core™ i7-1255U \r\n | \r\n\r\n Golden Cove \r\n | \r\n\r\n Alder Lake \r\n | \r\n|
| \r\n Precision 3260 \r\n | \r\n\r\n Intel® Core™ i7-12700 \r\n | \r\n\r\n Golden Cove \r\n | \r\n\r\n Alder Lake \r\n | \r\n|
| \r\n Precision 3570 \r\n | \r\n\r\n Intel® Core™ i7-1255U \r\n | \r\n\r\n Golden Cove \r\n | \r\n\r\n Alder Lake \r\n | \r\n|
| \r\n Latitude 5440 \r\n | \r\n\r\n Intel® Core™ i5-1335U \r\n | \r\n\r\n Raptor Cove \r\n | \r\n\r\n Raptor Lake \r\n | \r\n|
| \r\n Latitude 5540 \r\n | \r\n\r\n Intel® Core™ i5-1335U \r\n | \r\n\r\n Raptor Cove \r\n | \r\n\r\n Raptor Lake \r\n | \r\n|
| \r\n Precision 3580 \r\n | \r\n\r\n Intel® Core™ i5-1350P \r\n | \r\n\r\n Raptor Cove \r\n | \r\n\r\n Raptor Lake \r\n | \r\n
The evaluation was carried out in accordance with the Common Criteria Evaluation and Validation Scheme (CCEVS) process and scheme. The criteria against which the Archon OS was evaluated is described in the Common Criteria for Information Technology Security Evaluation, Version 3.1 rev 5. The evaluation methodology used by the evaluation team to conduct the evaluation is the Common Methodology for Information Technology Security Evaluation, Version 3.1 rev 5. The product, when delivered and configured as identified in the Common Criteria Administrator Guidance, satisfies all of the security functional requirements stated in the CACI Archon OS v3.0.0.2 Security Target v1.5. The project underwent CCEVS Validator review. The evaluation was completed in July 2024. Results of the evaluation can be found in the Common Criteria Evaluation and Validation Scheme Validation Report prepared by CCEVS.
","environmental_strengths":"Environmental Strengths:
\r\nThe TOE provides the security functions required by Protection Profile for General Purpose Operating Systems, Version 4.3 (PP_OS_V4.3) and Functional Package for Transport Layer Security (TLS), Version 1.1 (PKG_TLS_V1.1).
\r\nThe TOE generates and stores audit events using the Lightweight Audit Framework (LAF). The LAF is designed to be an audit system making Linux compliant with the requirements from Common Criteria by intercepting all system calls and retrieving audit log entries from privileged user space applications. The framework allows configuring the events to be recorded from the set of all events that are possible to be audited. Each audit record contains the date and time of event, type of event, subject identity, user identity, and result (success/fail) of the action if applicable.
\r\nThe TOE provides a broad range of cryptographic support, providing TLSv1.2 protocol implementation in addition to individual cryptographic algorithms. The cryptographic services provided by the TOE are described below and in full detail in Section 6.2 of the Security Target.
\r\nThe TOE includes the OpenSSL v1.1.1k cryptographic library, and each cryptographic algorithm has been validated for conformance to the requirements specified in their respective standards as identified in Section 6.2 of the Security Target.
\r\nThe OpenSSL library provides the TLS Client function. The OpenSSL library also provides cryptographic algorithms for the trusted update and secure boot security functions.
\r\nThe TOE provides two SP800-90A-compliant DRBG for creation of key components of asymmetric keys and random number generation. One CTR_DRBG is provided by the OpenSSL cryptographic module in application space and one HMAC_DRBG is provided by a Cryptographic Kernel API module located in the Kernel space.
\r\nDiscretionary Access Control (DAC) allows the TOE to assign owners to file system objects and Inter-Process Communication (IPC) objects. The owners are allowed to modify Unix-type permission bits for these objects to permit or deny access for other users or groups. The DAC mechanism also ensures that untrusted users cannot tamper with the TOE mechanisms.
\r\nThe TOE also implements Portable Operating System Interface (POSIX) Access Control Lists (ACLs) that allow the specification of the access to individual file system objects down to the granularity of a single user.
\r\nUser identification and authentication in the TOE includes all forms of interactive login (e.g., log in at the local console) as well as identity changes through the su or sudo commands. These all rely on explicit authentication information provided interactively by a user.
\r\nThe authentication security function allows password-based authentication.
\r\nPassword quality enforcement mechanisms are offered by the TOE which are enforced at the time when the password is changed.
\r\nThe security management facilities provided by the TOE are usable by authorized users and/or authorized administrators to modify the configuration of TSF.
\r\nThe TOE displays informative banners before users are allowed to establish a session.
\r\nThe TOE implements self-protection mechanisms that protect the security mechanisms of the TOE as well as software executed by the TOE. The following kernel-space isolation and TSF self-protection mechanisms are implemented and enforced (full details are provided in the TSS):
\r\nThe TOE supports TLSv1.2 to secure remote communications.
\r\nThe following documents are essential to understanding and controlling the TOE in the evaluated configuration:
\r\n","features":[{"id":2350,"feature_name":"Asymmetric Key Generation"},{"id":2505,"feature_name":"Auditing"},{"id":2370,"feature_name":"Certificate Authentication"},{"id":2366,"feature_name":"Certificate Validation"},{"id":2355,"feature_name":"Cryptographic Hashing"},{"id":2353,"feature_name":"Cryptographic Key Establishment"},{"id":2381,"feature_name":"Cryptographic Signature Generation"},{"id":2382,"feature_name":"Cryptographic Signature Verification"},{"id":2357,"feature_name":"DRBG"},{"id":2506,"feature_name":"Key Destruction"},{"id":2363,"feature_name":"Keyed-hash message authentication"},{"id":2349,"feature_name":"Operating System"}]}