Relevant CIS benchmark for Fedora 41 Workstation?

Hi!

I have been looking at CIS benchmarks for my hardening my laptop Fedora 41. I see that Fedora does not have a specific benchmark, however there are benchmarks for distribution independent Linux and RHEL.

Any comments on which of these would be the most relevant?

1 Like

Added workstation

As a small off-topic, if you are looking for an alternate solution I might advise the Scap Security Guide .

dnf install scap-security-guide

Run the report and then check the generated /tmp/oscap-report.html file in the browser

oscap xccdf eval --profile xccdf_org.ssgproject.content_profile_cusp_fedora --report /tmp/oscap-report.html --fetch-remote-resources /usr/share/xml/scap/ssg/content/ssg-fedora-ds.xml

You can choose from various profiles and apparently we do not have yet one for F41 but probably it’s coming soon…

Very nice, I’ll definitely check that out!

1 Like