Commercial operating systems that provide conventional, user-based security features are typically evaluated at EAL4.
Numerous smart card devices have been evaluated at EAL5, as have multilevel secure devices such as the Tenix Interactive Link.