The Center for Internet SecurityThe Center for Internet Security Site MapContact UsPrivacy Policy
The Center for Internet Security
HomeNewsWhat is CIS?Benchmarks/ToolsOther ResourcesJoin UsTestimonialsFAQ
CIS Members site

Become a Member of CIS - Click here for more info

More than 170 members, from around the wrold! Click here for more info

Get Involved - Click here for more info



CIS certifies commercial software. Click here for more info

CIS licenses resources for commercial use.  Click here for more info.

click here to find out about CIS trademarks.

Click here to find out about upcoming conferences and events!

Benchmarks/Tools
 
CIS Level 1 Benchmarks for Red Hat Linux, SUSE Linux, Debian Linux, and Slackware Linux and Scoring Tool (for Red Hat and SUSE only) - Click Here to Download Them
- FAQ - The Benchmarks
June 2009:

The Red Hat Linux, SUSE Linux, and Slackware Linux Benchmarks are now available!
 
The Download Files Include:
  • CIS_RHLinux_Benchmark_v1.0.5.pdf (October 2006) - The Red Hat Linux 4 Benchmark v1.0.5 document containing detailed instructions for implementing the steps necessary for CIS Level-I security on Red Hat Linux systems, including RHEL 2.1, RHEL 3.0, RHEL 4.0, and Fedora Core 1,2,3,4 & 5).
  • CIS_RHLinux_Benchmark_v1.0.5.zip - The Red Hat Linux 4 Benchmark v1.0.5 document and Bastille configuration files for CIS Level-I security on Red Hat Linux systems, including RHEL 2.1, RHEL 3.0, RHEL 4.0, and Fedora Core 1,2,3,4 & 5).
  • CIS_RHEL_5.0-5.1_Benchmark_v1.1.2.pdf - The Red Hat Linux 5 Benchmark document v1.1.2 containing detailed instructions for implementing the steps necessary for CIS Level-I security on Red Hat Linux 5 systems.
  • CIS_SUSE_Linux_Benchmark_v2.0.pdf - the Benchmark document contains detailed instructions for implementing the steps necessary for CIS Level 1 security on SUSE Enterprise Server.
  • CIS_Debian_v1.0.pdf - the Benchmark document contains detailed instructions for securing Debian Linux.
  • CIS_Slackware_Linux_Benchmark_v1.1.pdf - the Benchmark document contains detailed instructions for implementing the steps necessary for CIS Level 1 security on Slackware Linux systems.
  • Version 1.0 of the NG Scoring Tool for SUSE 9.0 and Red Hat Linux version 4.  The tool can be downloaded either with a bundled JVM (Java Virtual Machine) or without.  
What are the Benchmarks and Scoring Tool?
The Benchmarks are a compilation of security configuration actions and settings that "harden" Red Hat Linux, SUSE Linux, and Slackware Linux operating systems.  They recommend Level 1 Benchmark guidance, representing the prudent level of minimum due care for operating system security.

Level 1 Benchmark settings/actions:

  • Can be understood and performed by system administrators with any level of security knowledge and experience;
  • Are unlikely to cause an interruption of service to the operating system or the applications that run on it; and
  • Can be automatically monitored either by CIS Scoring Tools or by CIS Certified tools available from security software vendors.  CLICK HERE for a roster of commercially available
    CIS-certified software tools.  
Share Your Feedback
We value your feedback, which may be used both to update and further define the Linux Benchmarks' security configuration recommendations.  Please direct your technical feedback to:
The CIS Feedback Email Address
Please direct other feedback to:
Bert Miuccio, Vice President
For more information about the CIS consensus process and the benchmarks, go to What are the Benchmarks? and FAQ - The Benchmarks.  
Updates to the Benchmark and Tool
The CIS Level 1 Red Hat Linux, SUSE Linux, and Slackware Linux Benchmarks are updated periodically. Continuous feedback from CIS Members and other users assures that the consensus standard of minimum due care is always reflected in the recommended settings.

Revision histories can be found in the benchmark documents.  One of the benefits of CIS Membership is electronic notification when updates become available. 

Click Here for more information about membership.  If your organization is not a member of the Center, visit this website periodically to assure that you are using the latest version of the Linix Benchmarks.

DOWNLOAD the CIS Level 1 Red Hat Linux, SUSE Linux, Debian and Slackware Linux Benchmarks and the Scoring Tool for Red Hat Linux (non-JVM only) and SUSE Linux




Logo and Design by Keiler
© 2005, the Center for Internet Security.