New CIS Ubuntu Linux 24.04 LTS Benchmark v1.0.0 Audits

Summary

Customers can now measure compliance against the latest version of this CIS benchmark:

• Ubuntu Linux 24.04 v1.0.0

The new audit files include Level 1 Server, Level 2 Server, Level 1 Workstation, and Level 2 Workstation profiles. These audits have been certified through CIS and can be viewed along with Tenable's other certified products at https://www.cisecurity.org/partner/tenable.

The v1.0.0 benchmarks and audits include updates to several checks in the following sections:

• 1.5 Configure Additional Process Hardening  
  • This section has been updated to improve several additional hardening checks, such as:
    • 1.5.1 Ensure address space layout randomization is enabled
    • 1.5.2 Ensure ptrace_scope is restricted
    • 1.5.3 Ensure core dumps are restricted
• 2 Services
  • Updated recommendations for service checks:
    • 2.2.4 Ensure telnet client is not installed
    • 2.2.6 Ensure ftp client is not installed
    • 2.1.4 Ensure dns server services are not in use
• 5.1 - Configure SSH Server
  • Updated recommendations for additional SSH settings:
    • 5.1.2 Ensure permissions on SSH private host key files are configured
    • 5.1.17 Ensure sshd MaxSessions is configured
• 6 Logging and Auditing 
  • Updated recommendations for logging and auditing section
    • 6.1.2.1.1 Ensure systemd-journal-remote is installed
    • 6.1.2.3 Ensure journald Compress is configured
    • 6.1.3.4 Ensure rsyslog log file creation mode is configured
• There are many more changes and updates to these versions. Please review the CIS benchmark changelog for additional information.

Tenable Audits

CIS Ubuntu Linux 24.04 v1.0.0 - Level 1 Server

CIS Ubuntu Linux 24.04 v1.0.0 - Level 2 Server

CIS Ubuntu Linux 24.04 v1.0.0 - Level 1 Workstation

CIS Ubuntu Linux 24.04 v1.0.0 - Level 2 Workstation

Target Release Date

Immediate