CIS Level 2 Guidelines
Support Ubuntu Pro 22.04, 24.04
For more details about the Center for Internet Security (CIS) please refer to the official documentation.
Instruction Steps
Install the UA (Ubuntu Advantage) client
sudo apt updatesudo apt install ubuntu-advantage-toolsSet up the Ubuntu Security Guide
sudo ua enable usgsudo apt install usgCheck SCAP Content Overview (Security Content Automation Protocol)
sudo oscap info /usr/share/ubuntu-scap-security-guides/1/benchmarks/ssg-ubuntu2204-ds.xmlAuditing an Ubuntu System for DISA-STIG Compliance
sudo usg audit cis_level2_serverThe report is generated in /var/lib/usg/
Applying the CIS rules to a Set of Systems
There are 2 ways to apply the CIS rules:
Method 1: Use the usg command directly (recommend)
sudo usg fix cis_level2_serverMethod 2: Use usg to generate a script and then run the script
sudo usg generate-fix cis_level2_server --output fix.shRun the fix.sh:
./fix.sh