xorg and EAL4+

[James Courtier-Dutton]

Hi,

Fortunately, Linux has EAL4+ security evaluation done for most security
targets (configurations).
The one major thing that is excluded each time is the X front end.
I.e. Linux has EAL4+ for a server config, without X.
Have any moves been made to modify X so that it could reach EAL4+
certifications?
Or, is the X protocol just so broken, that X could never reach this
level of security.

The only alternative at the moment is MS Windows, that does have EAL4+
certifications.

Kind Regards

James