CIS Level 2 Guidelines - Linux

Info

Support Ubuntu Pro 22.04, 24.04

For more details about the Center for Internet Security (CIS) please refer to the official documentation.

Instruction Steps

Install the UA (Ubuntu Advantage) client

sudo apt update
sudo apt install ubuntu-advantage-tools

Set up the Ubuntu Security Guide

sudo ua enable usg
sudo apt install usg

Check SCAP Content Overview (Security Content Automation Protocol)

sudo oscap info /usr/share/ubuntu-scap-security-guides/1/benchmarks/ssg-ubuntu2204-ds.xml

Auditing an Ubuntu System for DISA-STIG Compliance

sudo usg audit cis_level2_server

The report is generated in /var/lib/usg/

Applying the CIS rules to a Set of Systems

There are 2 ways to apply the CIS rules:

Method 1: Use the usg command directly (recommend)

sudo usg fix cis_level2_server

Method 2: Use usg to generate a script and then run the script

sudo usg generate-fix cis_level2_server --output fix.sh

Run the fix.sh:

./fix.sh


Next to read:
CIS Level 1 Guidelines - Linux
On This Page
CIS Level 2 Guidelines - LinuxInstruction StepsInstall the UA (Ubuntu Advantage) clientSet up the Ubuntu Security GuideCheck SCAP Content Overview (Security Content Automation Protocol)Auditing an Ubuntu System for DISA-STIG ComplianceApplying the CIS rules to a Set of Systems