GPOSPP

US GOVERNMENT PROTECTION PROFILE FOR
GENERAL-PURPOSE OPERATING SYSTEMS IN
A NETWORKED ENVIRONMENT
Version 1.0
http://www.commoncriteriaportal.org/files/ppfiles/pp_os_br_v1.0.pdf

P.TRUSTED_RECOVERY

O.RECOVERY

5.6.2 Trusted Recovery (FPT_RCV)
5.6.2.1 Manual Recovery (FPT_RCV.1) Dependencies: AGD_OPE.1 Operational user guidance
FPT_RCV.1.1
Refinement: After a failure or service discontinuity that may lead to a violation of the TSP, the TSF shall enter a maintenance mode where the ability to return the TOE to a secure state is provided.
Application Note: In maintenance mode normal operation might be impossible or severely restricted, as otherwise insecure situations might occur. Typically, only authorized users should be allowed access to this mode.

maintenance modeかぁ