I was hoping that someone knew where to find xccdf files for Ubuntu 20.04 with CIS benchmarks to run with Openscap. It looks like the out-of-the-box Openscap only includes RHEL, firefox, and java. I see that Ubuntu Security Guide might be an option, but I'm looking for something free.


1 Answer 1


Try the OpenSCAP project GitHub repository: https://github.com/ComplianceAsCode/content/tree/master/

I think also the official CIS website (https://www.cisecurity.org/) provides XCCDF files for various operating systems, including Ubuntu 20.04.

  • I don't see xccdfs for Ubuntu 20.04 through the git project, nor through the CIS website. Benchmarks are available, but not xccdf files. Commented Dec 28, 2022 at 19:54
  • @sam Try going to releases and downloading the latest release.
    – idontknow
    Commented Jan 9, 2023 at 2:39
  • @idontknow, thanks! ansible remediation playbook under release is ultimately what I wanted. Commented Jan 21, 2023 at 3:01

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .