KubeArmor adds a number of new capabilities in this 0.5 release, including: Support for BPF-LSM policy enforcement,Integration with the Kubernetes admission controller, andSupport for the CRI-O container runtime engine.We’ve expanded platform support to include AWS Bottlerocket, Linux 2,...
KubeArmor now supports SELinux based enforcement for host policies, This allows enforcement on virtual machines or bare metal instances with Red Hat Enterprise Linux and CentOS.
Default Security PostureOne of the tenets of achieving Zero Trust stature requires one to set the workloads in "least-permissive mode". Setting up...
IntroductionThe Linux security module (LSM) framework, which allows for security extensions to be plugged into the kernel, has been used to implement...
In this blog, we will see how to defend against Chaos malware using Accuknox’s Open-source tools. This blog is very specific...