^^^^^^^^^^^^^It would be interesting to see the specs for how the approved version was configured.^^^^^^^^^^^^^^^
I would too. I wonder how 3rd party packages played into this.
It’s easy for something to be secure if it comes out of the box with everything turned off, or with everything removed/stripped.
If it were done with everything + the kitchen sink on, installed, and enabled then Bill probably was twitching. :-)
Besides, this isn’t the first RH OS to reach high security rating, SuSE has also done it.
Just to pick a nit--SUSE isn't a RH OS. :)