CIS Level 2 Guidelines

Instruction Steps

Install the UA (Ubuntu Advantage) client

sudo apt update

sudo apt install ubuntu-advantage-tools

Set up the Ubuntu Security Guide

sudo ua enable usg

sudo apt install usg

Check SCAP Content Overview (Security Content Automation Protocol)

sudo oscap info /usr/share/ubuntu-scap-security-guides/1/benchmarks/ssg-ubuntu2204-ds.xml

Auditing an Ubuntu System for DISA-STIG Compliance

sudo usg audit cis_level2_server

The report is generated in /var/lib/usg/

Applying the CIS rules to a Set of Systems

There are 2 ways to apply the CIS rules:

Method 1: Use the usg command directly (recommend)

sudo usg fix cis_level2_server

Method 2: Use usg to generate a script and then run the script

sudo usg generate-fix cis_level2_server --output fix.sh

Run the fix.sh:

./fix.sh