Re: NT's C2 rating

[Derek Atkins <warlord@MIT.EDU>]

> configuration can be certified as C2 compliant. The way I read the orange
> book, no system with a network connection can ever be C2. For that matter a
> system can't get C2 unless it is in an area where you can control and
> monitor physical access to the system.

This is incorrect -- you can have a C2 system which has a network
connection.  Indeed, you can get a B2 rating with a networked system,
c.f. Multics.

-derek