Profiles in ComplianceAsCode

Alibaba Cloud Linux 2

• Default Profile for Alibaba Cloud Linux 2
• PCI-DSS v4.0 Control Baseline for Alibaba Cloud Linux 2
• Standard System Security Profile for Alibaba Cloud Linux 2

Alibaba Cloud Linux 3

• Default Profile for Alibaba Cloud Linux 3
• PCI-DSS v4.0 Control Baseline for Alibaba Cloud Linux 3
• Standard System Security Profile for Alibaba Cloud Linux 3

AlmaLinux OS 9

• ANSSI-BP-028 (enhanced)
• ANSSI-BP-028 (high)
• ANSSI-BP-028 (intermediary)
• ANSSI-BP-028 (minimal)
• CIS AlmaLinux OS 9 Benchmark for Level 1 - Server
• CIS AlmaLinux OS 9 Benchmark for Level 1 - Workstation
• CIS AlmaLinux OS 9 Benchmark for Level 2 - Server
• CIS AlmaLinux OS 9 Benchmark for Level 2 - Workstation
• Health Insurance Portability and Accountability Act (HIPAA)
• PCI-DSS v4.0.1 Control Baseline for AlmaLinux OS 9

Amazon Elastic Kubernetes Service

• CIS Amazon Elastic Kubernetes Service (EKS) Benchmark - Node
• CIS Amazon Elastic Kubernetes Service Benchmark - Platform
• Default Profile for Amazon Elastic Kubernetes Service

Amazon Linux 2023

• CIS Amazon Linux 2023 Benchmark for Level 1 - Server
• CIS Amazon Linux 2023 Benchmark for Level 2 - Server

Anolis OS 23

• Default Profile for Anolis OS 23
• PCI-DSS v4.0 Control Baseline for Anolis OS 23
• Standard System Security Profile for Anolis OS 23

Anolis OS 8

• Default Profile for Anolis OS 8
• PCI-DSS v4.0 Control Baseline for Anolis OS 8
• Standard System Security Profile for Anolis OS 8

Chromium

• Upstream STIG for Google Chromium

Debian 11

• Default Profile for Debian 11
• Profile for ANSSI DAT-NT28 Average (Intermediate) Level
• Profile for ANSSI DAT-NT28 High (Enforced) Level
• Profile for ANSSI DAT-NT28 Minimal Level
• Profile for ANSSI DAT-NT28 Restrictive Level
• Standard System Security Profile for Debian 11

Debian 12

• ANSSI-BP-028 (enhanced)
• ANSSI-BP-028 (high)
• ANSSI-BP-028 (intermediary)
• ANSSI-BP-028 (minimal)
• Default Profile for Debian 12
• Profile for ANSSI DAT-NT28 Average (Intermediate) Level
• Profile for ANSSI DAT-NT28 High (Enforced) Level
• Profile for ANSSI DAT-NT28 Minimal Level
• Profile for ANSSI DAT-NT28 Restrictive Level
• Standard System Security Profile for Debian 12

Example

• Default Profile for Example
• Sample Security Profile for Linux-like OSes

Fedora

• CUSP - Common User Security Profile for Fedora Workstation
• Default Profile for Fedora
• OSPP - Protection Profile for General Purpose Operating Systems
• PCI-DSS v3.2.1 Control Baseline for Fedora
• Standard System Security Profile for Fedora

Firefox

• CUSP - Common User Security Profile for Mozilla Firefox
• Default Profile for Firefox
• Mozilla Firefox STIG

Kylin Server 10

• Standard System Security Profile for Kylin Server V10

OpenEmbedded

• Default Profile for OpenEmbedded
• Sample expanded Security Profile for OpenEmbedded Distros
• Sample Security Profile for OpenEmbedded Distros

openEuler 2203

• Standard System Security Profile for openEuler 22.03 LTS

openSUSE

• Default Profile for openSUSE
• Standard System Security Profile for openSUSE

Oracle Linux 10

• DRAFT - ANSSI-BP-028 (enhanced)
• DRAFT - ANSSI-BP-028 (high)
• DRAFT - ANSSI-BP-028 (intermediary)
• DRAFT - ANSSI-BP-028 (minimal)
• DRAFT - Australian Cyber Security Centre (ACSC) Essential Eight
• DRAFT - Australian Cyber Security Centre (ACSC) ISM Official - Base
• DRAFT - Australian Cyber Security Centre (ACSC) ISM Official - Secret
• DRAFT - Australian Cyber Security Centre (ACSC) ISM Official - Top Secret
• DRAFT - DISA STIG for Oracle Linux 10
• DRAFT - DISA STIG for Oracle Linux 10
• DRAFT - Health Insurance Portability and Accountability Act (HIPAA)
• DRAFT - PCI-DSS v4.0.1 Control Baseline for Oracle Linux 10
• DRAFT - Protection Profile for General Purpose Operating Systems

Oracle Linux 7

• ANSSI-BP-028 (enhanced)
• ANSSI-BP-028 (intermediary)
• ANSSI-BP-028 (minimal)
• Criminal Justice Information Services (CJIS) Security Policy
• Default Profile for Oracle Linux 7
• DISA STIG for Oracle Linux 7
• DISA STIG with GUI for Oracle Linux 7
• DRAFT - ANSSI-BP-028 (high)
• DRAFT - Australian Cyber Security Centre (ACSC) Essential Eight
• DRAFT - Protection Profile for General Purpose Operating Systems
• Health Insurance Portability and Accountability Act (HIPAA)
• NIST National Checklist Program Security Guide
• PCI-DSS v3.2.1 Control Baseline Draft for Oracle Linux 7
• Security Profile of Oracle Linux 7 for SAP
• Standard System Security Profile for Oracle Linux 7
• Unclassified Information in Non-federal Information Systems and Organizations (NIST 800-171)

Oracle Linux 8

• ANSSI-BP-028 (enhanced)
• ANSSI-BP-028 (high)
• ANSSI-BP-028 (intermediary)
• ANSSI-BP-028 (minimal)
• Australian Cyber Security Centre (ACSC) ISM Official
• Criminal Justice Information Services (CJIS) Security Policy
• Default Profile for Oracle Linux 8
• DISA STIG for Oracle Linux 8
• DISA STIG with GUI for Oracle Linux 8
• DRAFT - Australian Cyber Security Centre (ACSC) Essential Eight
• DRAFT - Protection Profile for General Purpose Operating Systems
• Health Insurance Portability and Accountability Act (HIPAA)
• PCI-DSS v4.0 Control Baseline for Oracle Linux 8
• Standard System Security Profile for Oracle Linux 8
• Unclassified Information in Non-federal Information Systems and Organizations (NIST 800-171)

Oracle Linux 9

• ANSSI-BP-028 (enhanced)
• ANSSI-BP-028 (high)
• ANSSI-BP-028 (intermediary)
• ANSSI-BP-028 (minimal)
• Australian Cyber Security Centre (ACSC) Essential Eight
• Australian Cyber Security Centre (ACSC) ISM Official
• Centro Criptológico Nacional (CCN) - STIC for Oracle Linux 9 - Advanced
• Centro Criptológico Nacional (CCN) - STIC for Oracle Linux 9 - Basic
• Centro Criptológico Nacional (CCN) - STIC for Oracle Linux 9 - Intermediate
• Default Profile for Oracle Linux 9
• DRAFT - DISA STIG for Oracle Linux 9
• DRAFT - DISA STIG with GUI for Oracle Linux 9
• DRAFT - Protection Profile for General Purpose Operating Systems
• DRAFT - Unclassified Information in Non-federal Information Systems and Organizations (NIST 800-171)
• Health Insurance Portability and Accountability Act (HIPAA)
• PCI-DSS v4.0 Control Baseline for Oracle Linux 9
• Standard System Security Profile for Oracle Linux 9

Red Hat Enterprise Linux 10

• ANSSI-BP-028 (enhanced)
• ANSSI-BP-028 (high)
• ANSSI-BP-028 (intermediary)
• ANSSI-BP-028 (minimal)
• Australian Cyber Security Centre (ACSC) Essential Eight
• Australian Cyber Security Centre (ACSC) ISM Official - Base
• Australian Cyber Security Centre (ACSC) ISM Official - Secret
• Australian Cyber Security Centre (ACSC) ISM Official - Top Secret
• Default Profile for Red Hat Enterprise Linux 10
• DRAFT - CIS Red Hat Enterprise Linux 10 Benchmark for Level 1 - Server
• DRAFT - CIS Red Hat Enterprise Linux 10 Benchmark for Level 1 - Workstation
• DRAFT - CIS Red Hat Enterprise Linux 10 Benchmark for Level 2 - Server
• DRAFT - CIS Red Hat Enterprise Linux 10 Benchmark for Level 2 - Workstation
• DRAFT - Protection Profile for General Purpose Operating Systems
• Health Insurance Portability and Accountability Act (HIPAA)
• PCI-DSS v4.0.1 Control Baseline for Red Hat Enterprise Linux 10
• Red Hat STIG for Red Hat Enterprise Linux 10
• Red Hat STIG for Red Hat Enterprise Linux 10

Red Hat Enterprise Linux 8

• ANSSI-BP-028 (enhanced)
• ANSSI-BP-028 (high)
• ANSSI-BP-028 (intermediary)
• ANSSI-BP-028 (minimal)
• Australian Cyber Security Centre (ACSC) Essential Eight
• Australian Cyber Security Centre (ACSC) ISM Official
• CIS Red Hat Enterprise Linux 8 Benchmark for Level 1 - Server
• CIS Red Hat Enterprise Linux 8 Benchmark for Level 1 - Workstation
• CIS Red Hat Enterprise Linux 8 Benchmark for Level 2 - Server
• CIS Red Hat Enterprise Linux 8 Benchmark for Level 2 - Workstation
• Criminal Justice Information Services (CJIS) Security Policy
• Default Profile for Red Hat Enterprise Linux 8
• DISA STIG for Red Hat Enterprise Linux 8
• DISA STIG with GUI for Red Hat Enterprise Linux 8
• Health Insurance Portability and Accountability Act (HIPAA)
• PCI-DSS v4.0.1 Control Baseline for Red Hat Enterprise Linux 8
• Protection Profile for General Purpose Operating Systems
• Red Hat Corporate Profile for Certified Cloud Providers (RH CCP)
• Standard System Security Profile for Red Hat Enterprise Linux 8
• Unclassified Information in Non-federal Information Systems and Organizations (NIST 800-171)

Red Hat Enterprise Linux 9

• ANSSI-BP-028 (enhanced)
• ANSSI-BP-028 (high)
• ANSSI-BP-028 (intermediary)
• ANSSI-BP-028 (minimal)
• Australian Cyber Security Centre (ACSC) Essential Eight
• Australian Cyber Security Centre (ACSC) ISM Official
• Centro Criptológico Nacional (CCN) - STIC for Red Hat Enterprise Linux 9 - Advanced
• Centro Criptológico Nacional (CCN) - STIC for Red Hat Enterprise Linux 9 - Basic
• Centro Criptológico Nacional (CCN) - STIC for Red Hat Enterprise Linux 9 - Intermediate
• CIS Red Hat Enterprise Linux 9 Benchmark for Level 1 - Server
• CIS Red Hat Enterprise Linux 9 Benchmark for Level 1 - Workstation
• CIS Red Hat Enterprise Linux 9 Benchmark for Level 2 - Server
• CIS Red Hat Enterprise Linux 9 Benchmark for Level 2 - Workstation
• Default Profile for Red Hat Enterprise Linux 9
• DISA STIG for Red Hat Enterprise Linux 9
• DISA STIG with GUI for Red Hat Enterprise Linux 9
• DRAFT - Unclassified Information in Non-federal Information Systems and Organizations (NIST 800-171)
• Health Insurance Portability and Accountability Act (HIPAA)
• PCI-DSS v4.0.1 Control Baseline for Red Hat Enterprise Linux 9
• Protection Profile for General Purpose Operating Systems

Red Hat Enterprise Linux CoreOS 4

• Australian Cyber Security Centre (ACSC) Essential Eight
• Default Profile for Red Hat Enterprise Linux CoreOS 4
• DISA STIG for Red Hat Enterprise Linux CoreOS
• DISA STIG for Red Hat Enterprise Linux CoreOS
• DISA STIG for Red Hat Enterprise Linux CoreOS
• DISA STIG for Red Hat Enterprise Linux CoreOS
• DRAFT - ANSSI-BP-028 (enhanced)
• DRAFT - ANSSI-BP-028 (high)
• DRAFT - ANSSI-BP-028 (intermediary)
• DRAFT - ANSSI-BP-028 (minimal)
• DRAFT - BSI APP.4.4. and SYS.1.6
• DRAFT - BSI APP.4.4. and SYS.1.6
• NIST 800-53 High-Impact Baseline for Red Hat Enterprise Linux CoreOS
• NIST 800-53 High-Impact Baseline for Red Hat Enterprise Linux CoreOS
• NIST 800-53 Moderate-Impact Baseline for Red Hat Enterprise Linux CoreOS
• NIST 800-53 Moderate-Impact Baseline for Red Hat Enterprise Linux CoreOS
• North American Electric Reliability Corporation (NERC) Critical Infrastructure Protection (CIP) cybersecurity standards profile for Red Hat Enterprise Linux CoreOS

Red Hat OpenShift Container Platform 4

• Australian Cyber Security Centre (ACSC) Essential Eight
• BSI IT-Grundschutz (Basic Protection) Building Block SYS.1.6 and APP.4.4
• BSI IT-Grundschutz (Basic Protection) Building Block SYS.1.6 and APP.4.4
• BSI IT-Grundschutz (Basic Protection) Building Block SYS.1.6 and APP.4.4
• BSI IT-Grundschutz (Basic Protection) Building Block SYS.1.6 and APP.4.4
• CIS Red Hat OpenShift Container Platform 4 Benchmark
• CIS Red Hat OpenShift Container Platform 4 Benchmark
• CIS Red Hat OpenShift Container Platform 4 Benchmark
• CIS Red Hat OpenShift Container Platform 4 Benchmark
• CIS Red Hat OpenShift Container Platform 4 Benchmark
• CIS Red Hat OpenShift Container Platform 4 Benchmark
• CIS Red Hat OpenShift Container Platform 4 Benchmark
• CIS Red Hat OpenShift Container Platform 4 Benchmark
• Default Profile for Red Hat OpenShift Container Platform 4
• DISA STIG for Red Hat OpenShift Container Platform 4 - Node level
• DISA STIG for Red Hat OpenShift Container Platform 4 - Node level
• DISA STIG for Red Hat OpenShift Container Platform 4 - Node level
• DISA STIG for Red Hat OpenShift Container Platform 4 - Node level
• DISA STIG for Red Hat OpenShift Container Platform 4 - Platform level
• DISA STIG for Red Hat OpenShift Container Platform 4 - Platform level
• DISA STIG for Red Hat OpenShift Container Platform 4 - Platform level
• DISA STIG for Red Hat OpenShift Container Platform 4 - Platform level
• NIST 800-53 High-Impact Baseline for Red Hat OpenShift - Node level
• NIST 800-53 High-Impact Baseline for Red Hat OpenShift - Node level
• NIST 800-53 High-Impact Baseline for Red Hat OpenShift - Platform level
• NIST 800-53 High-Impact Baseline for Red Hat OpenShift - Platform level
• NIST 800-53 Moderate-Impact Baseline for Red Hat OpenShift - Node level
• NIST 800-53 Moderate-Impact Baseline for Red Hat OpenShift - Node level
• NIST 800-53 Moderate-Impact Baseline for Red Hat OpenShift - Platform level
• NIST 800-53 Moderate-Impact Baseline for Red Hat OpenShift - Platform level
• North American Electric Reliability Corporation (NERC) Critical Infrastructure Protection (CIP) cybersecurity standards profile for the Red Hat OpenShift Container Platform - Node level
• North American Electric Reliability Corporation (NERC) Critical Infrastructure Protection (CIP) cybersecurity standards profile for the Red Hat OpenShift Container Platform - Platform level
• PCI-DSS v3.2.1 Control Baseline for Red Hat OpenShift Container Platform 4
• PCI-DSS v3.2.1 Control Baseline for Red Hat OpenShift Container Platform 4
• PCI-DSS v3.2.1 Control Baseline for Red Hat OpenShift Container Platform 4
• PCI-DSS v3.2.1 Control Baseline for Red Hat OpenShift Container Platform 4
• PCI-DSS v4.0.0 Control Baseline for Red Hat OpenShift Container Platform 4
• PCI-DSS v4.0.0 Control Baseline for Red Hat OpenShift Container Platform 4

Red Hat Virtualization 4

• Default Profile for Red Hat Virtualization 4
• DRAFT - DISA STIG for Red Hat Virtualization Host (RHVH)
• PCI-DSS v3.2.1 Control Baseline for Red Hat Virtualization Host (RHVH)
• VPP - Protection Profile for Virtualization v. 1.0 for Red Hat Virtualization Host (RHVH)

SUSE Linux Enterprise 12

• ANSSI-BP-028 (enhanced)
• ANSSI-BP-028 (high)
• ANSSI-BP-028 (intermediary)
• ANSSI-BP-028 (minimal)
• CIS SUSE Linux Enterprise 12 Benchmark for Level 1 - Server
• CIS SUSE Linux Enterprise 12 Benchmark for Level 1 - Workstation
• CIS SUSE Linux Enterprise 12 Benchmark for Level 2 - Server
• CIS SUSE Linux Enterprise 12 Benchmark Level 2 - Workstation
• Default Profile for SUSE Linux Enterprise 12
• DISA STIG for SUSE Linux Enterprise 12
• PCI-DSS v3.2.1 Control Baseline for SUSE Linux enterprise 12
• PCI-DSS v4 Control Baseline for SUSE Linux enterprise 12
• Standard System Security Profile for SUSE Linux Enterprise 12

SUSE Linux Enterprise 15

• ANSSI-BP-028 (enhanced)
• ANSSI-BP-028 (high)
• ANSSI-BP-028 (intermediary)
• ANSSI-BP-028 (minimal)
• CIS SUSE Linux Enterprise 15 Benchmark for Level 1 - Server
• CIS SUSE Linux Enterprise 15 Benchmark for Level 1 - Workstation
• CIS SUSE Linux Enterprise 15 Benchmark for Level 2 - Server
• CIS SUSE Linux Enterprise 15 Benchmark Level 2 - Workstation
• Default Profile for SUSE Linux Enterprise 15
• DISA STIG for SUSE Linux Enterprise 15
• Hardening for Public Cloud Image of SUSE Linux Enterprise Server (SLES) for SAP Applications 15
• Health Insurance Portability and Accountability Act (HIPAA)
• PCI-DSS v4 Control Baseline for SUSE Linux enterprise 15
• Public Cloud Hardening for SUSE Linux Enterprise 15
• Standard System Security Profile for SUSE Linux Enterprise 15

SUSE Linux Enterprise Micro 5

• CIS benchmark for SUSE Linux Enterprise Micro (SLEM) 5 for Level 1 - Server
• CIS benchmark for SUSE Linux Enterprise Micro (SLEM) 5 for Level 1 - Workstation
• CIS benchmark for SUSE Linux Enterprise Micro (SLEM) 5 for Level 2 - Server
• CIS benchmark for SUSE Linux Enterprise Micro (SLEM) 5 for Level 2 - Workstation
• DISA STIG for SUSE Linux Enterprise Micro (SLEM) 5
• Public Cloud Hardening for SUSE Linux Enterprise Micro (SLEM) 5

TencentOS Server 4

• Basic System Security Profile for TencentOS Server 4
• Standard System Security Profile for TencentOS Server 4

Ubuntu 16.04

• Default Profile for Ubuntu 16.04
• Profile for ANSSI DAT-NT28 Average (Intermediate) Level
• Profile for ANSSI DAT-NT28 High (Enforced) Level
• Profile for ANSSI DAT-NT28 Minimal Level
• Profile for ANSSI DAT-NT28 Restrictive Level
• Standard System Security Profile for Ubuntu 16.04

Ubuntu 18.04

• CIS Ubuntu 18.04 LTS Benchmark
• Default Profile for Ubuntu 18.04
• Profile for ANSSI DAT-NT28 Average (Intermediate) Level
• Profile for ANSSI DAT-NT28 High (Enforced) Level
• Profile for ANSSI DAT-NT28 Minimal Level
• Profile for ANSSI DAT-NT28 Restrictive Level
• Standard System Security Profile for Ubuntu 18.04

Ubuntu 20.04

• Canonical Ubuntu 20.04 LTS Security Technical Implementation Guide (STIG) V1R12
• CIS Ubuntu 20.04 Level 1 Server Benchmark
• CIS Ubuntu 20.04 Level 1 Workstation Benchmark
• CIS Ubuntu 20.04 Level 2 Server Benchmark
• CIS Ubuntu 20.04 Level 2 Workstation Benchmark
• Default Profile for Ubuntu 20.04
• Standard System Security Profile for Ubuntu 20.04

Ubuntu 22.04

• Canonical Ubuntu 22.04 LTS Security Technical Implementation Guide (STIG) V2R3
• CIS Ubuntu 22.04 Level 1 Server Benchmark
• CIS Ubuntu 22.04 Level 1 Workstation Benchmark
• CIS Ubuntu 22.04 Level 2 Server Benchmark
• CIS Ubuntu 22.04 Level 2 Workstation Benchmark
• Default Profile for Ubuntu 22.04
• Standard System Security Profile for Ubuntu 22.04

Ubuntu 24.04

• (DRAFT) Canonical Ubuntu 24.04 LTS Security Technical Implementation Guide (STIG) V1R1
• CIS Ubuntu Linux 24.04 LTS Benchmark for Level 1 - Server
• CIS Ubuntu Linux 24.04 LTS Benchmark for Level 1 - Workstation
• CIS Ubuntu Linux 24.04 LTS Benchmark for Level 2 - Server
• CIS Ubuntu Linux 24.04 LTS Benchmark for Level 2 - Workstation
• Default Profile for Ubuntu 24.04