Applying the CIS rules to the current systemΒΆ
Modifying a system to comply with the CIS benchmark with USG is as simple as the following command:
$ sudo usg fix <PROFILE>
where profile is one of the following:
Profile name |
Corresponding CIS profile |
---|---|
cis_level1_workstation |
Level 1 Workstation profile |
cis_level1_server |
Level 1 Server profile |
cis_level2_workstation |
Level 2 Workstation profile |
cis_level2_server |
Level 2 Server profile |