CIS hardening support in Container-Optimized OS from Google

Source

At Google, we follow a security-first philosophy to make safeguarding our clients’ and users' data easier and more scalable, with strong security principles built into multiple layers of Google Cloud. In line with this philosophy, we want to make sure that our Container-Optimized OS adheres to industry-standard security best practices. To this end, we released a CIS benchmark for Container-Optimized OS that codifies the recommendations for hardening and security measures we have been using. Our Container-Optimized OS 97 releases now support CIS Level 1 compliance, with an option to enable support for CIS Level 2 hardening. CIS benchmarks help define [...]