{"id":42140,"date":"2021-08-04T11:51:18","date_gmt":"2021-08-04T11:51:18","guid":{"rendered":"http:\/\/0ef4fa13-b2b1-4df4-b34f-030c9ac6703f"},"modified":"2021-08-04T11:51:18","modified_gmt":"2021-08-04T11:51:18","slug":"qualys-partners-with-red-hat-to-improve-linux-and-kubernetes-security","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/qualys-partners-with-red-hat-to-improve-linux-and-kubernetes-security\/","title":{"rendered":"Qualys partners with Red Hat to improve Linux and Kubernetes security"},"content":{"rendered":"
<\/div>\n

Everyone in the Linux and cloud world knows Red Hat<\/a>. Everyone who pays attention to security knows Qualys<\/a>. Now, the two are joining forces to bring Qualys’s Cloud Agent<\/a> to Red Hat Enterprise Linux (RHEL) CoreOS<\/a> and Red Hat OpenShift<\/a> to better secure both systems.<\/p>\n

Qualys Cloud Agent is a lightweight software agent. Typically it uses about 2% of CPU resources with bursts of up to 5%. Once in place, it takes a full configuration assessment of its host while running in the background and uploading that snapshot to the Qualys Cloud  Platform. The agent itself is self-updating and self-healing, so you need never reinstall or reboot it to keep the latest version up and running. <\/p>\n

OpenShift is, as most of you know, Red Hat’s Kubernetes<\/a> distribution. CoreOS is Red Hat’s specialized version of RHEL for OpenShift. Besides being its base operating system, CoreOS also underlines OpenShift’s control plane. <\/p>\n

In this case, the CoreOS Cloud Agent for OpenShift works with Qualys’s Container Security Runtime<\/a>. This provides continuous discovery of packages and vulnerabilities for the complete OpenShift stack. It does this by placing a lightweight snippet of Qualys code into the container image. Once there, it enables policy-driven monitoring, detection, and blocking of unwanted container behavior at runtime. This eliminates the need for host-based sidecar management and privileged containers. Once instrumented in the image, it will work within each container irrespective of where the container is instantiated and it doesn’t need any additional administration containers. <\/p>\n

Specifically, the Qualys Cloud Agent for CoreOS on OpenShift brings the following features to OpenShift managers. <\/p>\n