{% extends "security/base_security.html" %}

{% block title %}Ubuntu DISA-STIG compliance | Security{% endblock %}

{% block meta_description %}Technical details on the Ubuntu DISA-STIG guide for Linux.{% endblock %}

{% block meta_copydoc %}
  https://docs.google.com/document/d/1zJwZzc-cERj9YKNXFtmrXwynJptyT7-D3qCNzBctRfo/edit#
{% endblock meta_copydoc %}

{% block content %}

  <section class="p-strip--suru-topped">
    <div class="row u-equal-height u-vertically-center">
      <div class="col-8">
        <h1>DISA-STIG on Ubuntu</h1>
        <h2 class="p-heading--4">Comply with the DISA Security Technical Implementation Guide</h2>
        <p>
          Security Technical Implementation Guides (STIG) are developed by the Defense Information System Agency (DISA) for the U.S. Department of Defense (DoD). <a href="/cloud/public-cloud">Ubuntu Pro on public cloud</a> and <a href="/pro">Ubuntu Pro (Infra)</a> have the necessary <a href="/security/fips">certifications</a> and controls to comply with DISA-STIG guidelines on Linux.
        </p>
        <a class="p-button--positive js-invoke-modal"
           href="/security/contact-us">Contact us</a>
        <a class="p-button" href="/pro">Get Ubuntu Pro (Infra)</a>
      </div>
      <div class="col-4 u-hide--medium u-hide--small u-align--center">
        {{ image (
        url="https://assets.ubuntu.com/v1/ef01809f-DISA-logo-transparent.png",
        alt="DISA-STIG logo",
        width="720",
        height="264",
        hi_def=True,
        loading="auto"
        ) | safe
        }}
      </div>
    </div>
  </section>

  <div class="u-fixed-width">
    <hr class="p-rule" />
  </div>

  <section class="p-strip">
    <div class="row u-equal-height u-vertically-center">
      <div class="col-7">
        <h2>How does Ubuntu enable your compliance with FIPS, and DISA-STIG?</h2>
        <p>
          Learn about the US government security standards and the common challenges faced by organisations in their implementation. See how the <a href="/security/certifications/docs/disa-stig">Ubuntu Security Guide</a> can transform systems compliance in a few minutes. Get to know how Ubuntu is a secure platform for government agencies and complying organisations to build, operate and innovate with open source applications and technologies.
        </p>
        <a class="p-button--positive js-invoke-modal"
           href="/security/contact-us">Contact us</a>
      </div>
      <div class="col-5 u-hide--medium u-hide--small u-align--center">
        <div class="jsBrightTALKEmbedWrapper u-vertically-center"
             style="width:100%;
                    height:100%;
                    position:relative;
                    background: #ffffff">
          <script class="jsBrightTALKEmbedConfig" type="application/json">
            {
              "channelId": 6793,
              "language": "en-US",
              "commId": 524647,
              "displayMode": "standalone",
              "height": "280"
            }
          </script>
          <script src="https://www.brighttalk.com/clients/js/player-embed/player-embed.js"
                  class="jsBrightTALKEmbed"></script>
          <script>
            const iframe = document.querySelector('.jsBrightTALKEmbedWrapper iframe');
            iframe.addEventListener('load', () => {
              iframe.scrolling = "yes";
            });
          </script>
        </div>
      </div>
    </div>
  </section>

  <section class="p-strip--light">
    <div class="u-fixed-width">
      <h2>What is DISA-STIG?</h2>
      <p>
        The Defense Information System Agency (DISA) is a US Department of Defense combat support agency. It provides and operates information infrastructure to support military operations and national-level leadership. The Security Technical Implementation Guide (STIG) is a configuration standard consisting of guidelines for hardening systems to improve a system’s security posture. It can be seen as a checklist for securing protocols, services, or servers to improve the overall security by reducing the attack surface.
      </p>
    </div>
  </section>

  <section class="p-strip">
    <div class="u-fixed-width">
      <h2>DISA-STIG for Ubuntu</h2>
      <p class="u-sv3">
        Together with Canonical, DISA has developed STIGs for Ubuntu. The U.S. DoD provides the <a href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">STIG checklist</a>, which can be viewed using <a href="https://public.cyber.mil/stigs/stig-viewing-tools/">STIG viewer</a>, and <a href="https://public.cyber.mil/stigs/scap/">SCAP content for auditing</a>. The versions of Ubuntu that have STIGs available by DISA are marked on the table below.
      </p>
      <table class="p-table--compliance-profiles">
        <thead>
          <th class="u-hide--small"></th>
          <th></th>
          <th class="u-align--center">Ubuntu 16.04 LTS</th>
          <th class="u-align--center">Ubuntu 18.04 LTS</th>
          <th class="u-align--center">Ubuntu 20.04 LTS</th>
        </thead>
        <tbody>
          <tr>
            <td class="u-hide--small">
              {{ image (
              url="https://assets.ubuntu.com/v1/ef01809f-DISA-logo-transparent.png",
              alt="DISA logo",
              width="136",
              height="50",
              hi_def=True,
              attrs={"style": "vertical-align: middle;"},
              loading="lazy"
              ) | safe
              }}
            </td>
            <td>
              Defense Information System Agency <a href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">Security Technical Implementation Guides (STIGs)</a> and <a href="https://public.cyber.mil/stigs/supplemental-automation-content/">Supplemental Automation Content</a> for Ubuntu
            </td>
            <td class="u-align--center">
              {{ image(url="https://assets.ubuntu.com/v1/2ccda8d7-tick-orange.svg", alt="Yes: Configuration guide", width="14", height="14", hi_def=True, loading="lazy",) | safe }}
            </td>
            <td class="u-align--center">
              {{ image(url="https://assets.ubuntu.com/v1/2ccda8d7-tick-orange.svg", alt="Yes: Configuration guide", width="14", height="14", hi_def=True, loading="lazy",) | safe }}
            </td>
            <td class="u-align--center">
              <i class="p-icon--success">Yes: Tooling and automation</i>
            </td>
          </tr>
        </tbody>
      </table>
      <ul class="p-inline-list" aria-label="key">
        <li class="p-inline-list__item">
          <img src="https://assets.ubuntu.com/v1/2ccda8d7-tick-orange.svg"
               alt="Yes: Configuration guide"
               style="height: 14px;
                      vertical-align: middle;
                      width: 14px" />
          <small>Configuration guide</small>
        </li>
        <li class="p-inline-list__item">
          <i class="p-icon--success">Yes</i>
          <small>Tooling and automation</small>
        </li>
      </ul>
      <a class="p-button--positive"
         href="/security/certifications/docs/disa-stig">Read more about Ubuntu tooling and automation</a>
    </div>
  </section>

  <section class="p-strip--light">
    <div class="row">
      <div class="col-12">
        <h2 class="u-sv3">How to audit and comply with DISA-STIG?</h2>
        <ol class="p-stepped-list">
          <li class="p-stepped-list__item">
            <h3 class="p-stepped-list__title">Auditing</h3>
            <div class="p-stepped-list__content">
              <p>Using the Ubuntu Security Guide auditing is as simple as:</p>
              <div class="p-code-snippet">
                <pre class="p-code-snippet__block--icon"><code>sudo usg audit disa_stig</code></pre>
              </div>
              <p>and get the report in machine readable or browser friendly format.</p>
            </div>
          </li>
          <li class="p-stepped-list__item">
            <h3 class="p-stepped-list__title">Compliance</h3>
            <div class="p-stepped-list__content">
              <p>Using the Ubuntu Security Guide applying the necessary rules for compliance is as simple as:</p>
              <div class="p-code-snippet">
                <pre class="p-code-snippet__block--icon"><code>sudo usg fix disa_stig</code></pre>
              </div>
            </div>
          </li>
        </ol>
        <p>
          <a class="p-button--positive"
             href="/security/certifications/docs/disa-stig">Read more about Ubuntu Security Guide</a>
        </p>
      </div>
    </div>
  </section>

  {% with first_item="_security_discussion", second_item="_security_esm", third_item="_security_further_reading" %}
    {% include "shared/contextual_footers/_contextual_footer.html" %}
  {% endwith %}

  <!-- Set default Marketo information for contact form below-->
  <div class="u-hide"
       id="contact-form-container"
       data-form-location="/shared/forms/interactive/general"
       data-form-id="1257"
       data-lp-id="2154"
       data-return-url="https://www.ubuntu.com/contact-us/form/thank-you"
       data-lp-url="https://pages.ubuntu.com/things-contact-us.html"></div>

{% endblock content %}