You can avoid the "heart-ache and the thousand natural shocks" of conflicting vulnerability reports by following Red Hat's OVAL feed and security ratings. Here's how…lire cet article en entier

In this final entry for the container security series, we'll look at network traffic control for containers running in Red Hat OpenShift…lire cet article en entier

In our last post we talked about using Multi-Category Security (MCS) instead of Multi-Level Security (MLS) to provide isolation on systems with different levels of…lire cet article en entier

In this post, we look at Control-Flow Integrity (CFI) protection implemented by the Clang compiler for x86_64 architecture…lire cet article en entier

Red Hat’s virtualization ecosystem consists of QEMU, an emulator, and Linux's Kernel-based Virtual Machine (KVM), an in-kernel driver along with many other software projects that…lire cet article en entier

In our last post, we discussed SELinux and how it can be used to improve container security. We also looked at the Multi-Level Security (MLS)…lire cet article en entier

An optimizing compiler is one that tries to maximize some attributes of an executable program at the expense of other attributes. Most modern compilers support…lire cet article en entier

This post looks at the vulnerability discovered in the Datagram Transport Layer Security (DTLS) found in GnuTLS recently…lire cet article en entier

In the first of a four-part series, we will look at how containers can be isolated from the host system and each other…lire cet article en entier

This post explains how to customize crypto policies in Red Hat Enterprise Linux 8.2…lire cet article en entier