Profiles in ComplianceAsCode

Alibaba Cloud Linux 2

• CIS Aliyun Linux 2 Benchmark for Level 1
• CIS Aliyun Linux 2 Benchmark for Level 2
• Standard System Security Profile for Alibaba Cloud Linux 2

Alibaba Cloud Linux 3

• CIS Benchmark for Alibaba Cloud Linux 3 for Level 1
• CIS Benchmark for Alibaba Cloud Linux 3 for Level 2
• Standard System Security Profile for Alibaba Cloud Linux 3

Amazon Elastic Kubernetes Service

• CIS Amazon Elastic Kubernetes Service (EKS) Benchmark - Node
• CIS Amazon Elastic Kubernetes Service Benchmark - Platform

Anolis OS 23

• Standard System Security Profile for Anolis OS 23

Anolis OS 8

• Standard System Security Profile for Anolis OS 8

Apple macOS 10.15

• NIST 800-53 Moderate-Impact Baseline for Apple macOS 10.15 Catalina

Chromium

• Upstream STIG for Google Chromium

Debian 10

• Profile for ANSSI DAT-NT28 Average (Intermediate) Level
• Profile for ANSSI DAT-NT28 High (Enforced) Level
• Profile for ANSSI DAT-NT28 Minimal Level
• Profile for ANSSI DAT-NT28 Restrictive Level
• Standard System Security Profile for Debian 10

Debian 11

• Profile for ANSSI DAT-NT28 Average (Intermediate) Level
• Profile for ANSSI DAT-NT28 High (Enforced) Level
• Profile for ANSSI DAT-NT28 Minimal Level
• Profile for ANSSI DAT-NT28 Restrictive Level
• Standard System Security Profile for Debian 11

Debian 12

• Profile for ANSSI DAT-NT28 Average (Intermediate) Level
• Profile for ANSSI DAT-NT28 High (Enforced) Level
• Profile for ANSSI DAT-NT28 Minimal Level
• Profile for ANSSI DAT-NT28 Restrictive Level
• Standard System Security Profile for Debian 12

Example

• Sample Security Profile for Linux-like OSes

Fedora

• CUSP - Common User Security Profile for Fedora Workstation
• OSPP - Protection Profile for General Purpose Operating Systems
• PCI-DSS v3.2.1 Control Baseline for Fedora
• Standard System Security Profile for Fedora

Firefox

• CUSP - Common User Security Profile for Mozilla Firefox
• Mozilla Firefox STIG

OpemEmbedded

• Sample Security Profile for OpenEmbedded Distros

openSUSE

• Standard System Security Profile for openSUSE

Oracle Linux 7

• ANSSI-BP-028 (enhanced)
• ANSSI-BP-028 (intermediary)
• ANSSI-BP-028 (minimal)
• Criminal Justice Information Services (CJIS) Security Policy
• DISA STIG for Oracle Linux 7
• DISA STIG with GUI for Oracle Linux 7
• DRAFT - ANSSI-BP-028 (high)
• DRAFT - Australian Cyber Security Centre (ACSC) Essential Eight
• DRAFT - Protection Profile for General Purpose Operating Systems
• Health Insurance Portability and Accountability Act (HIPAA)
• NIST National Checklist Program Security Guide
• PCI-DSS v3.2.1 Control Baseline Draft for Oracle Linux 7
• Security Profile of Oracle Linux 7 for SAP
• Standard System Security Profile for Oracle Linux 7
• Unclassified Information in Non-federal Information Systems and Organizations (NIST 800-171)

Oracle Linux 8

• ANSSI-BP-028 (enhanced)
• ANSSI-BP-028 (high)
• ANSSI-BP-028 (intermediary)
• ANSSI-BP-028 (minimal)
• Criminal Justice Information Services (CJIS) Security Policy
• DISA STIG for Oracle Linux 8
• DISA STIG with GUI for Oracle Linux 8
• DRAFT - Australian Cyber Security Centre (ACSC) Essential Eight
• DRAFT - Protection Profile for General Purpose Operating Systems
• Health Insurance Portability and Accountability Act (HIPAA)
• PCI-DSS v3.2.1 Control Baseline Draft for Oracle Linux 8
• Standard System Security Profile for Oracle Linux 8
• Unclassified Information in Non-federal Information Systems and Organizations (NIST 800-171)

Oracle Linux 9

• ANSSI-BP-028 (enhanced)
• ANSSI-BP-028 (high)
• ANSSI-BP-028 (intermediary)
• ANSSI-BP-028 (minimal)
• Australian Cyber Security Centre (ACSC) Essential Eight
• DRAFT - DISA STIG for Oracle Linux 9
• DRAFT - DISA STIG with GUI for Oracle Linux 9
• DRAFT - Protection Profile for General Purpose Operating Systems
• DRAFT - Unclassified Information in Non-federal Information Systems and Organizations (NIST 800-171)
• Health Insurance Portability and Accountability Act (HIPAA)
• PCI-DSS v3.2.1 Control Baseline for Oracle Linux 9
• Standard System Security Profile for Oracle Linux 9

Red Hat Enterprise Linux 7

• ANSSI-BP-028 (enhanced)
• ANSSI-BP-028 (high)
• ANSSI-BP-028 (intermediary)
• ANSSI-BP-028 (minimal)
• Australian Cyber Security Centre (ACSC) Essential Eight
• C2S for Red Hat Enterprise Linux 7
• CIS Red Hat Enterprise Linux 7 Benchmark for Level 1 - Server
• CIS Red Hat Enterprise Linux 7 Benchmark for Level 1 - Workstation
• CIS Red Hat Enterprise Linux 7 Benchmark for Level 2 - Server
• CIS Red Hat Enterprise Linux 7 Benchmark for Level 2 - Workstation
• Criminal Justice Information Services (CJIS) Security Policy
• DISA STIG for Red Hat Enterprise Linux 7
• DISA STIG with GUI for Red Hat Enterprise Linux 7
• Health Insurance Portability and Accountability Act (HIPAA)
• NIST National Checklist Program Security Guide
• OSPP - Protection Profile for General Purpose Operating Systems v4.2.1
• PCI-DSS v4.0 Control Baseline for Red Hat Enterprise Linux 7
• Red Hat Corporate Profile for Certified Cloud Providers (RH CCP)
• RHV hardening based on STIG for Red Hat Enterprise Linux 7
• Standard System Security Profile for Red Hat Enterprise Linux 7
• Unclassified Information in Non-federal Information Systems and Organizations (NIST 800-171)
• VPP - Protection Profile for Virtualization v. 1.0 for Red Hat Virtualization

Red Hat Enterprise Linux 8

• ANSSI-BP-028 (enhanced)
• ANSSI-BP-028 (high)
• ANSSI-BP-028 (intermediary)
• ANSSI-BP-028 (minimal)
• Australian Cyber Security Centre (ACSC) Essential Eight
• Australian Cyber Security Centre (ACSC) ISM Official
• CIS Red Hat Enterprise Linux 8 Benchmark for Level 1 - Server
• CIS Red Hat Enterprise Linux 8 Benchmark for Level 1 - Workstation
• CIS Red Hat Enterprise Linux 8 Benchmark for Level 2 - Server
• CIS Red Hat Enterprise Linux 8 Benchmark for Level 2 - Workstation
• Criminal Justice Information Services (CJIS) Security Policy
• DISA STIG for Red Hat Enterprise Linux 8
• DISA STIG with GUI for Red Hat Enterprise Linux 8
• Health Insurance Portability and Accountability Act (HIPAA)
• PCI-DSS v4.0 Control Baseline for Red Hat Enterprise Linux 8
• Protection Profile for General Purpose Operating Systems
• Red Hat Corporate Profile for Certified Cloud Providers (RH CCP)
• Standard System Security Profile for Red Hat Enterprise Linux 8
• Unclassified Information in Non-federal Information Systems and Organizations (NIST 800-171)

Red Hat Enterprise Linux 9

• ANSSI-BP-028 (enhanced)
• ANSSI-BP-028 (high)
• ANSSI-BP-028 (intermediary)
• ANSSI-BP-028 (minimal)
• Australian Cyber Security Centre (ACSC) Essential Eight
• Australian Cyber Security Centre (ACSC) ISM Official
• CCN Red Hat Enterprise Linux 9 - Advanced
• CCN Red Hat Enterprise Linux 9 - Basic
• CCN Red Hat Enterprise Linux 9 - Intermediate
• CIS Red Hat Enterprise Linux 9 Benchmark for Level 1 - Server
• CIS Red Hat Enterprise Linux 9 Benchmark for Level 1 - Workstation
• CIS Red Hat Enterprise Linux 9 Benchmark for Level 2 - Server
• CIS Red Hat Enterprise Linux 9 Benchmark for Level 2 - Workstation
• DISA STIG for Red Hat Enterprise Linux 9
• DISA STIG with GUI for Red Hat Enterprise Linux 9
• DRAFT - Unclassified Information in Non-federal Information Systems and Organizations (NIST 800-171)
• Health Insurance Portability and Accountability Act (HIPAA)
• PCI-DSS v4.0 Control Baseline for Red Hat Enterprise Linux 9
• Protection Profile for General Purpose Operating Systems

Red Hat Enterprise Linux CoreOS 4

• Australian Cyber Security Centre (ACSC) Essential Eight
• DISA STIG for Red Hat Enterprise Linux CoreOS
• DISA STIG for Red Hat Enterprise Linux CoreOS
• DRAFT - ANSSI-BP-028 (enhanced)
• DRAFT - ANSSI-BP-028 (high)
• DRAFT - ANSSI-BP-028 (intermediary)
• DRAFT - ANSSI-BP-028 (minimal)
• NIST 800-53 High-Impact Baseline for Red Hat Enterprise Linux CoreOS
• NIST 800-53 High-Impact Baseline for Red Hat Enterprise Linux CoreOS
• NIST 800-53 Moderate-Impact Baseline for Red Hat Enterprise Linux CoreOS
• NIST 800-53 Moderate-Impact Baseline for Red Hat Enterprise Linux CoreOS
• North American Electric Reliability Corporation (NERC) Critical Infrastructure Protection (CIP) cybersecurity standards profile for Red Hat Enterprise Linux CoreOS

Red Hat OpenShift Container Platform 4

• Australian Cyber Security Centre (ACSC) Essential Eight
• CIS Red Hat OpenShift Container Platform 4 Benchmark
• CIS Red Hat OpenShift Container Platform 4 Benchmark
• CIS Red Hat OpenShift Container Platform 4 Benchmark
• CIS Red Hat OpenShift Container Platform 4 Benchmark
• DISA STIG for Red Hat OpenShift Container Platform 4 - Node level
• DISA STIG for Red Hat OpenShift Container Platform 4 - Node level
• DISA STIG for Red Hat OpenShift Container Platform 4 - Platform level
• DISA STIG for Red Hat OpenShift Container Platform 4 - Platform level
• NIST 800-53 High-Impact Baseline for Red Hat OpenShift - Node level
• NIST 800-53 High-Impact Baseline for Red Hat OpenShift - Node level
• NIST 800-53 High-Impact Baseline for Red Hat OpenShift - Platform level
• NIST 800-53 High-Impact Baseline for Red Hat OpenShift - Platform level
• NIST 800-53 Moderate-Impact Baseline for Red Hat OpenShift - Node level
• NIST 800-53 Moderate-Impact Baseline for Red Hat OpenShift - Node level
• NIST 800-53 Moderate-Impact Baseline for Red Hat OpenShift - Platform level
• NIST 800-53 Moderate-Impact Baseline for Red Hat OpenShift - Platform level
• North American Electric Reliability Corporation (NERC) Critical Infrastructure Protection (CIP) cybersecurity standards profile for the Red Hat OpenShift Container Platform - Node level
• North American Electric Reliability Corporation (NERC) Critical Infrastructure Protection (CIP) cybersecurity standards profile for the Red Hat OpenShift Container Platform - Platform level
• PCI-DSS v3.2.1 Control Baseline for Red Hat OpenShift Container Platform 4
• PCI-DSS v3.2.1 Control Baseline for Red Hat OpenShift Container Platform 4
• PCI-DSS v3.2.1 Control Baseline for Red Hat OpenShift Container Platform 4
• PCI-DSS v3.2.1 Control Baseline for Red Hat OpenShift Container Platform 4

Red Hat Virtualization 4

• DRAFT - DISA STIG for Red Hat Virtualization Host (RHVH)
• PCI-DSS v3.2.1 Control Baseline for Red Hat Virtualization Host (RHVH)
• VPP - Protection Profile for Virtualization v. 1.0 for Red Hat Virtualization Host (RHVH)

SUSE Linux Enterprise 12

• ANSSI-BP-028 (enhanced)
• ANSSI-BP-028 (high)
• ANSSI-BP-028 (intermediary)
• ANSSI-BP-028 (minimal)
• CIS SUSE Linux Enterprise 12 Benchmark for Level 1 - Server
• CIS SUSE Linux Enterprise 12 Benchmark for Level 1 - Workstation
• CIS SUSE Linux Enterprise 12 Benchmark for Level 2 - Server
• CIS SUSE Linux Enterprise 12 Benchmark Level 2 - Workstation
• DISA STIG for SUSE Linux Enterprise 12
• PCI-DSS v3.2.1 Control Baseline for SUSE Linux enterprise 12
• PCI-DSS v4 Control Baseline for SUSE Linux enterprise 12
• Standard System Security Profile for SUSE Linux Enterprise 12

SUSE Linux Enterprise 15

• ANSSI-BP-028 (enhanced)
• ANSSI-BP-028 (high)
• ANSSI-BP-028 (intermediary)
• ANSSI-BP-028 (minimal)
• CIS SUSE Linux Enterprise 15 Benchmark for Level 1 - Server
• CIS SUSE Linux Enterprise 15 Benchmark for Level 1 - Workstation
• CIS SUSE Linux Enterprise 15 Benchmark for Level 2 - Server
• CIS SUSE Linux Enterprise 15 Benchmark Level 2 - Workstation
• DISA STIG for SUSE Linux Enterprise 15
• Hardening for Public Cloud Image of SUSE Linux Enterprise Server (SLES) for SAP Applications 15
• Health Insurance Portability and Accountability Act (HIPAA)
• PCI-DSS v3.2.1 Control Baseline for SUSE Linux enterprise 15
• PCI-DSS v4 Control Baseline for SUSE Linux enterprise 15
• Public Cloud Hardening for SUSE Linux Enterprise 15
• Standard System Security Profile for SUSE Linux Enterprise 15

Ubuntu 16.04

• Profile for ANSSI DAT-NT28 Average (Intermediate) Level
• Profile for ANSSI DAT-NT28 High (Enforced) Level
• Profile for ANSSI DAT-NT28 Minimal Level
• Profile for ANSSI DAT-NT28 Restrictive Level
• Standard System Security Profile for Ubuntu 16.04

Ubuntu 18.04

• CIS Ubuntu 18.04 LTS Benchmark
• Profile for ANSSI DAT-NT28 Average (Intermediate) Level
• Profile for ANSSI DAT-NT28 High (Enforced) Level
• Profile for ANSSI DAT-NT28 Minimal Level
• Profile for ANSSI DAT-NT28 Restrictive Level
• Standard System Security Profile for Ubuntu 18.04

Ubuntu 20.04

• Canonical Ubuntu 20.04 LTS Security Technical Implementation Guide (STIG) V1R9
• CIS Ubuntu 20.04 Level 1 Server Benchmark
• CIS Ubuntu 20.04 Level 1 Workstation Benchmark
• CIS Ubuntu 20.04 Level 2 Server Benchmark
• CIS Ubuntu 20.04 Level 2 Workstation Benchmark
• Standard System Security Profile for Ubuntu 20.04

Ubuntu 22.04

• CIS Ubuntu 22.04 Level 1 Server Benchmark
• CIS Ubuntu 22.04 Level 1 Workstation Benchmark
• CIS Ubuntu 22.04 Level 2 Server Benchmark
• CIS Ubuntu 22.04 Level 2 Workstation Benchmark
• Standard System Security Profile for Ubuntu 22.04

UnionTech OS Server 20

• Standard System Security Profile for UnionTech OS Server 20