CIS CentOS Linux Benchmarks

Home • Resources • Platforms • CIS CentOS Linux Benchmarks

An objective, consensus-driven security guideline for the CentOS Linux Operating Systems.

A step-by-step checklist to secure CentOS Linux:

For CentOS Linux 7 (CIS CentOS Linux 7 Benchmark version 2.2.0)

CIS has worked with the community since 2013 to publish a benchmark for CentOS Linux

Other CIS Benchmark versions:

For CentOS Linux (CIS CentOS Linux 7 Benchmark version 2.1.1)

Want to skip most manual steps?

Buy Per Server Hour

CIS Hardened Image available for Benchmark version 2.1.1

Provision on AWS Marketplace, AWS GovCloud, Google Cloud Platform and Microsoft Azure

Only Available to CIS SecureSuite Members

Remediation Kit available for Benchmark version 2.1.0

CIS-CAT Pro is included with membership and can automatically test for compliance and remediate with this benchmark.

See the full list

Ticket • 14 Nov 2018

Linux flavor discrepency around SSHD idle timeout settings in the benchmarks

Ticket • 25 Oct 2018

Listed audit is overly broad for docker/kubernetes

Ticket • 27 Sep 2018

CIS CentOS Linux 7 Benchmark v2.2.0 recommendation 5.1.7

Ticket • 17 Sep 2018

netstat depricated in favor of ss

Center for Internet Security®