New CIS Linux v2.0.0 Benchmark Audits

Summary

Customers can now measure compliance against the latest versions of these CIS benchmarks:

• Red Hat 9 v2.0.0
• AlmaLinux 9 v2.0.0
• Oracle Linux 9 v2.0.0
• Rocky Linux 9 v2.0.0

The new audit files include Level 1 Server, Level 2 Server, Level 1 Workstation, and Level 2 Workstation profiles. These audits have been certified through CIS and can be viewed along with Tenable's other certified products at https://www.cisecurity.org/partner/tenable.

The v2.0.0 benchmarks and audits include new checks in the following sections:

• 1.1.1 - Configure Filesystem Kernel Modules
  • This section has been expanded to include several additional kernel modules, for such as:
    • 1.1.1.1 Ensure cramfs kernel module is not available
    • 1.1.1.2 Ensure freevxfs kernel module is not available
    • 1.1.1.8 Ensure usb-storage kernel module is not available
• 2.1 Configure Server Services
  • New recommendations for additional services:
    • 2.1.1 Ensure autofs services are not in use
    • 2.1.10 Ensure nis server services are not in use
    • 2.1.19 Ensure xinetd services are not in use
• 5.1 - Configure SSH Server
  • New recommendations for additional SSH settings:
    • 5.1.4 Ensure sshd Ciphers are configured
    • 5.1.5 Ensure sshd KexAlgorithms is configured
• 5.3.1 - Configure PAM software packages
  • New section to ensure latest version of PAM modules are installed
    • 5.3.1.1 Ensure latest version of pam is installed
    • 5.3.1.2 Ensure latest version of authselect is installed
    • 5.3.1.3 Ensure latest version of libpwquality is installed
• There are many more changes and updates to these versions. Please review the CIS benchmark changelog for additional information.

Tenable Audits

CIS Red Hat Enterprise Linux 9 v2.0.0 - Level 1 Server

CIS Red Hat Enterprise Linux 9 v2.0.0 - Level 2 Server

CIS Red Hat Enterprise Linux 9 v2.0.0 - Level 1 Workstation

CIS Red Hat Enterprise Linux 9 v2.0.0 - Level 2 Workstation

CIS AlmaLinux 9 v2.0.0 - Level 1 Server

CIS AlmaLinux 9 v2.0.0 - Level 2 Server

CIS AlmaLinux 9 v2.0.0 - Level 1 Workstation

CIS AlmaLinux 9 v2.0.0 - Level 2 Workstation

CIS Oracle Linux 9 v2.0.0 - Level 1 Server

CIS Oracle Linux 9 v2.0.0 - Level 2 Server

CIS Oracle Linux 9 v2.0.0 - Level 1 Workstation

CIS Oracle Linux 9 v2.0.0 - Level 2 Workstation

CIS Rocky Linux 9 v2.0.0 - Level 1 Server

CIS Rocky Linux 9 v2.0.0 - Level 2 Server

CIS Rocky Linux 9 v2.0.0 - Level 1 Workstation

CIS Rocky Linux 9 v2.0.0 - Level 2 Workstation

Target Release Date

Immediate