Installation of the Ubuntu Security Guide
The Ubuntu Security Guide is an easy to use tool for compliance and auditing, and is part of Ubuntu Pro and is installed using the Pro client. The tool is available to Ubuntu 20.04 or later versions.
Install the Pro client
sudo apt update
sudo apt install ubuntu-advantage-tools
Attach the subscription
NOTE: This step is not necessary in Ubuntu cloud images purchased through the cloud marketplaces
To attach your subscription follow the steps on the official Ubuntu guide.
Set up the Ubuntu Security Guide
Use the following commands to install the Ubuntu Security Guide (USG).
sudo pro enable usg
sudo apt install usg
Transitioning from the previous compliance tooling
The previous compliance tooling available in Ubuntu provided per-release scripts for CIS compliance. The following points map the old commands to the Ubuntu Security Guide syntax.
| Command | Replacement |
| /usr/share/ubuntu-scap-security-guides/cis-hardening/Canonical_Ubuntu_20.04_CIS-harden.sh | usg fix |
| /usr/share/ubuntu-scap-security-guides/cis-hardening/Canonical_Ubuntu_18.04_CIS-harden.sh | usg fix |
| /usr/share/ubuntu-scap-security-guides/cis-hardening/Canonical_Ubuntu_16.04_CIS_v1.1.0-harden.sh | usg fix |
| cis-audit | usg audit |
| Custom configuration with ruleset-params.conf | Profile customization |