I'm having a tough time achieving CIS compliance with Ubuntu 24.04 LTS and could really use some help or insights from those who've been through this. Here's the situation: I'm monitoring CIS controls using Wazuh and attempted to create my own remediation scripts, but I'm encountering inconsistencies—what works on one server fails on another, making it quite frustrating. My main objectives are to establish a CIS-based security baseline for my existing Ubuntu 24.04 servers, create a golden image that adheres to CIS Benchmarks, and keep monitoring my CIS compliance through Wazuh.
5 Answers
While I don't need CIS compliance on my home server, I've found some tools useful. You can take a look at this YouTube video that walks through some helpful setups: [CIS Setup Guide](https://youtu.be/XYxybI7xZTw?si=rkAJilY1ykJbGw_8).
You may struggle to find many free resources online since CIS funds itself by selling memberships for access to their tools. Check out [CIS Hardened Images](https://www.cisecurity.org/cis-hardened-images) for more information.
Instead of creating a golden image, focus on deploying a base image and layer on configurations with tools like Ansible. This approach, known as 'infrastructure as code,' helps you manage changes better and recreate your environment anywhere.
Consider using playbooks to automate the process of achieving CIS compliance. It can simplify your efforts significantly.
You might want to check the official Ubuntu documentation for some guidance. They have resources that could help with CIS compliance: [CIS Benchmarks Documentation](https://ubuntu.com/security/certifications/docs/usg/cis) and [Hardening Automation for Ubuntu 24.04 LTS](https://ubuntu.com/blog/hardening-automation-for-cis-benchmarks-now-available-for-ubuntu-24-04-lts).
Related Questions
Can't Load PhpMyadmin On After Server Update
Redirect www to non-www in Apache Conf
How To Check If Your SSL Cert Is SHA 1
Windows TrackPad Gestures