How Red Hat tackles security
Summary
But, he said, "While scanning tools can provide a useful single pane of glass view of vulnerabilities across an enterprise-wide environment, they generally do a poor job of articulating risks specific to a technology or implementation. Because "RHEL is the foundation of all of our products and services, we felt it was important to expand the scope of what we supported. "Where the rubber meets the road, so to speak, are the RHSAs that are issued and ultimately applied to a system, be it physical, virtual, or container. As time, content, and opportunity allows, well bundle multiple CVE updates into a single RHSA (but then issue separate RHSAs based off of product and version) to try and help ease that administrative burden of getting downtime windows for maintenance. " Maintaining security across Red Hats software ecosystem -- not to mention how it spans standalone servers, containers, and the cloud -- is a big job.
Classifications
AskAI Classifications
LabelsLinked Companies
