Operating systems · DEB · v0.1.0 · draft
Debian GNU/Linux
Secure configuration baseline for Debian servers. Version-specific differences are handled per control with applicability.versions.
Current state of the main branch, drafts included. Not released yet.
01
Controls
No control yet. Controls are written from primary sources by contributors, see how to contribute.
02
Profiles
- Baseline
baseline - Settings every server should apply. Low operational impact. 0 controls.
- Hardened
hardened - Stronger settings for exposed or sensitive servers. May break some workloads. Extends
baseline: applies every one of its controls too. 0 controls.
03
Domains
- Boot & kernel
CB-DEB-BOOT-NNN - 0 controls.
- Accounts & authentication
CB-DEB-AUTH-NNN - 0 controls.
- Network
CB-DEB-NET-NNN - 0 controls.
- Services
CB-DEB-SVC-NNN - 0 controls.
- Filesystem & permissions
CB-DEB-FS-NNN - 0 controls.
- Logging & auditing
CB-DEB-AUDIT-NNN - 0 controls.
04
Versions
A release is the git tag debian/v<version>: a zip with the controls, their translations, bundle.json and index.json.
05
Written from
- Debian Security Manual Debian, vendor-doc
- ANSSI - Recommandations de sécurité relatives à un système GNU/Linux ANSSI, guide
Maintained by Alice. Content under CC BY 4.0, _standard.yml.