U.S. flag   An official website of the United States government
Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Https

Secure .gov websites use HTTPS
A lock (Dot gov) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.

Ubuntu Linux 20.04 LTS Benchmark 3.0.0 Checklist Details (Checklist Revisions)

Supporting Resources:

Target:

Target CPE Name
Canonical Ubuntu 20.04 LTS cpe:/o:canonical:ubuntu_linux:20.04::%7e%7elts%7e%7e%7e (View CVEs)

Checklist Highlights

Checklist Name:
Ubuntu Linux 20.04 LTS Benchmark
Checklist ID:
1291
Version:
3.0.0
Type:
Compliance
Review Status:
Candidate
Authority:
Third Party: Center for Internet Security (CIS)
Original Publication Date:
03/31/2025

Checklist Summary:

This is the final release of the CIS Benchmark for Ubuntu Linux 20.04 LTS. Ubuntu Linux 20.04 LTS (Focal Fossa) goes end of general support in May 2025. CIS encourages you to migrate to a more recent, supported version of this technology. This document provides prescriptive guidance for establishing a secure configuration posture for Ubuntu Linux 20.04 LTS systems running on x86_64 platforms. This guide was developed and tested against Ubuntu 20.04.6 LTS The guidance within broadly assumes that operations are being performed as the root user and executed under the default Bash version for the applicable distribution. Operations performed using sudo instead of the root user, or executed under another shell, may produce unexpected results, or fail to make the intended changes to the system. Non-root users may not be able to access certain areas of the system, especially after remediation has been performed. It is advisable to verify root users path integrity and the integrity of any programs being run prior to execution of commands and scripts included in this benchmark. The default prompt for the root user is #, and as such all-sample commands will have # as an additional indication that it is to be executed as root. To obtain the latest version of this guide, please visit http://workbench.cisecurity.org. If you have questions, comments, or have identified ways to improve this guide, please write us at [email protected].

Checklist Role:

  • Operating System

Known Issues:

Not provided.

Target Audience:

This benchmark is intended for system and application administrators, security specialists, auditors, help desk, and platform deployment personnel who plan to develop, deploy, assess, or secure solutions that incorporate Ubuntu Linux 20.04 LTS on x86_64 platforms.

Target Operational Environment:

  • Managed

Testing Information:

This guide was developed and tested against Ubuntu 20.04.6 LTS

Regulatory Compliance:

Not provided.

Comments/Warnings/Miscellaneous:

Not provided.

Disclaimer:

https://www.cisecurity.org/cis-securesuite/cis-securesuite-membership-terms-of-use/

Product Support:

https://www.cisecurity.org/support

Point of Contact:

[email protected]

Sponsor:

Not provided.

Licensing:

https://www.cisecurity.org/cis-securesuite/cis-securesuite-membership-terms-of-use/

Change History:

Updated Status to Candidate - 07/07/2025

Dependency/Requirements:

URL Description

References:

Reference URL Description

NIST checklist record last modified on 07/07/2025


* This checklist is still undergoing review for inclusion into the NCP.