{
    "api_version": "1",
    "kind": "dse_post",
    "self": "https://update.dsesecurity.com/api/v1/posts/dse-20260917-143-select-every-intended-distribution-in-a-machine-configuration-cis-linux-baseline/",
    "item": {
        "id": "https://update.dsesecurity.com/updates/dse-20260917-143-select-every-intended-distribution-in-a-machine-configuration-cis-linux-baseline/",
        "slug": "dse-20260917-143-select-every-intended-distribution-in-a-machine-configuration-cis-linux-baseline",
        "url": "https://update.dsesecurity.com/updates/dse-20260917-143-select-every-intended-distribution-in-a-machine-configuration-cis-linux-baseline/",
        "alternate_urls": {
            "markdown": "https://update.dsesecurity.com/updates/dse-20260917-143-select-every-intended-distribution-in-a-machine-configuration-cis-linux-baseline.md",
            "json": "https://update.dsesecurity.com/api/v1/posts/dse-20260917-143-select-every-intended-distribution-in-a-machine-configuration-cis-linux-baseline/"
        },
        "title": "Select every intended distribution in a Machine Configuration CIS Linux baseline",
        "summary": "CIS Linux distribution selection determines which systems the customized benchmark evaluates.",
        "format": {
            "slug": "guide",
            "name": "Guide"
        },
        "priority": {
            "slug": "info",
            "name": "Information"
        },
        "featured": false,
        "image": {
            "theme": "cyber-defense",
            "label": "Cyber defense",
            "alt": "Layered glass and metal cyber-defense structure with controlled blue and gold signal paths.",
            "card_url": "https://update.dsesecurity.com/assets/editorial/cyber-defense-card.webp?v=1.8.20",
            "hero_url": "https://update.dsesecurity.com/assets/editorial/cyber-defense-hero.webp?v=1.8.20",
            "social_url": "https://update.dsesecurity.com/assets/editorial/cyber-defense-social-v2.jpg?v=1.8.20",
            "width": 2400,
            "height": 1350
        },
        "topics": [
            {
                "slug": "cybersecurity",
                "name": "Cybersecurity",
                "url": "https://update.dsesecurity.com/topic/cybersecurity/"
            },
            {
                "slug": "it",
                "name": "IT",
                "url": "https://update.dsesecurity.com/topic/it/"
            }
        ],
        "author": {
            "name": "DSE Security Editorial Team",
            "url": "https://update.dsesecurity.com/#editorial-team",
            "type": "Organization"
        },
        "publisher": {
            "name": "Detection Systems & Engineering",
            "url": "https://dsesecurity.com/"
        },
        "published_at": "2026-09-17T16:32:37+00:00",
        "modified_at": "2026-09-17T16:42:36+00:00",
        "reviewed_on": "2026-09-17",
        "reading_minutes": 2,
        "word_count": 230,
        "potentially_affected": "Use this review when preparing a customized Machine Configuration CIS Linux baseline. Establish the intended machine inventory and distributions before choosing settings. The source's supported choices must be checked against the actual machines; this article does not claim every Linux release is supported. This distribution selection applies to CIS Benchmarks for Linux; the source says Azure Security Baselines for Windows and Linux do not require it.",
        "dse_recommendation": "DSE recommends making a distribution-to-benchmark worksheet part of baseline review.",
        "primary_source": {
            "name": "Specify Custom Parameters For Baseline Policy - Azure Machine Configuration | Microsoft Learn",
            "url": "https://learn.microsoft.com/en-us/azure/governance/machine-configuration/how-to/assign-security-baselines/specify-custom-parameters-for-baseline-policy",
            "published_on": null,
            "authority": "Microsoft Learn"
        },
        "publishing_principles": "https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/",
        "usage_info": "https://update.dsesecurity.com/usage/",
        "copyright_notice": "Copyright © 2026 Detection Systems & Engineering. All rights reserved.",
        "content_html": "<h2>Source facts</h2>\n<p>Microsoft&#8217;s CIS Benchmarks for Linux customization guidance allows one or more supported distributions to be enabled and a benchmark version chosen for each. Distributions left unselected are excluded from evaluation. This customization therefore carries both distribution and benchmark-version choices. <a href=\"https://learn.microsoft.com/en-us/azure/governance/machine-configuration/how-to/assign-security-baselines/specify-custom-parameters-for-baseline-policy\" target=\"_blank\" rel=\"noopener noreferrer\">Microsoft Learn</a>.</p>\n<h2>Applicability</h2>\n<p>Use this review when preparing a customized Machine Configuration CIS Linux baseline. Establish the intended machine inventory and distributions before choosing settings. The source&#8217;s supported choices must be checked against the actual machines; this article does not claim every Linux release is supported. This distribution selection applies to CIS Benchmarks for Linux; the source says Azure Security Baselines for Windows and Linux do not require it.</p>\n<h2>DSE recommendation</h2>\n<p>DSE recommends making a distribution-to-benchmark worksheet part of baseline review. Ask the platform owner to account for each intended distribution and explicitly approve any exclusion. Keep the exported configuration artifact with that worksheet. Test representative machines from each selected population before treating the resulting report as coverage of the full intended estate.</p>\n<h2>Verification</h2>\n<p>Compare the exported settings with the approved distribution list and benchmark versions. Inspect evaluation evidence from one representative machine in each selected population, then confirm that deliberately excluded populations are documented as outside scope. Investigate an absent result before interpreting it as compliance. Retain the inventory snapshot and baseline artifact used for the coverage decision.</p>\n<h2>Official references</h2>\n<p><a href=\"https://learn.microsoft.com/en-us/azure/governance/machine-configuration/how-to/assign-security-baselines/specify-custom-parameters-for-baseline-policy\" target=\"_blank\" rel=\"noopener noreferrer\">Microsoft Learn: Specify Custom Parameters For Baseline Policy</a>.</p>",
        "content_text": "Source facts\nMicrosoft’s CIS Benchmarks for Linux customization guidance allows one or more supported distributions to be enabled and a benchmark version chosen for each. Distributions left unselected are excluded from evaluation. This customization therefore carries both distribution and benchmark-version choices. Microsoft Learn.\nApplicability\nUse this review when preparing a customized Machine Configuration CIS Linux baseline. Establish the intended machine inventory and distributions before choosing settings. The source’s supported choices must be checked against the actual machines; this article does not claim every Linux release is supported. This distribution selection applies to CIS Benchmarks for Linux; the source says Azure Security Baselines for Windows and Linux do not require it.\nDSE recommendation\nDSE recommends making a distribution-to-benchmark worksheet part of baseline review. Ask the platform owner to account for each intended distribution and explicitly approve any exclusion. Keep the exported configuration artifact with that worksheet. Test representative machines from each selected population before treating the resulting report as coverage of the full intended estate.\nVerification\nCompare the exported settings with the approved distribution list and benchmark versions. Inspect evaluation evidence from one representative machine in each selected population, then confirm that deliberately excluded populations are documented as outside scope. Investigate an absent result before interpreting it as compliance. Retain the inventory snapshot and baseline artifact used for the coverage decision.\nOfficial references\nMicrosoft Learn: Specify Custom Parameters For Baseline Policy.",
        "content_markdown": "## Source facts\n\nMicrosoft’s CIS Benchmarks for Linux customization guidance allows one or more supported distributions to be enabled and a benchmark version chosen for each. Distributions left unselected are excluded from evaluation. This customization therefore carries both distribution and benchmark-version choices. [Microsoft Learn](https://learn.microsoft.com/en-us/azure/governance/machine-configuration/how-to/assign-security-baselines/specify-custom-parameters-for-baseline-policy).\n\n## Applicability\n\nUse this review when preparing a customized Machine Configuration CIS Linux baseline. Establish the intended machine inventory and distributions before choosing settings. The source’s supported choices must be checked against the actual machines; this article does not claim every Linux release is supported. This distribution selection applies to CIS Benchmarks for Linux; the source says Azure Security Baselines for Windows and Linux do not require it.\n\n## DSE recommendation\n\nDSE recommends making a distribution-to-benchmark worksheet part of baseline review. Ask the platform owner to account for each intended distribution and explicitly approve any exclusion. Keep the exported configuration artifact with that worksheet. Test representative machines from each selected population before treating the resulting report as coverage of the full intended estate.\n\n## Verification\n\nCompare the exported settings with the approved distribution list and benchmark versions. Inspect evaluation evidence from one representative machine in each selected population, then confirm that deliberately excluded populations are documented as outside scope. Investigate an absent result before interpreting it as compliance. Retain the inventory snapshot and baseline artifact used for the coverage decision.\n\n## Official references\n\n[Microsoft Learn: Specify Custom Parameters For Baseline Policy](https://learn.microsoft.com/en-us/azure/governance/machine-configuration/how-to/assign-security-baselines/specify-custom-parameters-for-baseline-policy)."
    },
    "json_ld": {
        "@context": "https://schema.org",
        "@graph": [
            {
                "@type": "Organization",
                "@id": "https://dsesecurity.com/#organization",
                "name": "Detection Systems & Engineering",
                "alternateName": "DSE Security",
                "url": "https://dsesecurity.com/",
                "logo": {
                    "@type": "ImageObject",
                    "url": "https://update.dsesecurity.com/assets/dse-logo-20260812.png?v=1.8.20"
                }
            },
            {
                "@type": "Organization",
                "@id": "https://update.dsesecurity.com/#editorial-team",
                "name": "DSE Security Editorial Team",
                "url": "https://update.dsesecurity.com/",
                "parentOrganization": {
                    "@id": "https://dsesecurity.com/#organization"
                }
            },
            {
                "@type": "WebSite",
                "@id": "https://update.dsesecurity.com/#website",
                "name": "DSE Updates",
                "alternateName": "DSE Security Knowledge Hub",
                "url": "https://update.dsesecurity.com/",
                "inLanguage": "en-US",
                "publisher": {
                    "@id": "https://dsesecurity.com/#organization"
                },
                "potentialAction": {
                    "@type": "SearchAction",
                    "target": {
                        "@type": "EntryPoint",
                        "urlTemplate": "https://update.dsesecurity.com/?q={search_term_string}"
                    },
                    "query-input": "required name=search_term_string"
                }
            },
            {
                "@type": "WebPage",
                "@id": "https://update.dsesecurity.com/updates/dse-20260917-143-select-every-intended-distribution-in-a-machine-configuration-cis-linux-baseline/",
                "url": "https://update.dsesecurity.com/updates/dse-20260917-143-select-every-intended-distribution-in-a-machine-configuration-cis-linux-baseline/",
                "isPartOf": {
                    "@id": "https://update.dsesecurity.com/#website"
                },
                "lastReviewed": "2026-09-17"
            },
            {
                "@type": "BreadcrumbList",
                "@id": "https://update.dsesecurity.com/updates/dse-20260917-143-select-every-intended-distribution-in-a-machine-configuration-cis-linux-baseline/#breadcrumbs",
                "itemListElement": [
                    {
                        "@type": "ListItem",
                        "position": 1,
                        "name": "DSE Updates",
                        "item": "https://update.dsesecurity.com/"
                    },
                    {
                        "@type": "ListItem",
                        "position": 2,
                        "name": "Select every intended distribution in a Machine Configuration CIS Linux baseline",
                        "item": "https://update.dsesecurity.com/updates/dse-20260917-143-select-every-intended-distribution-in-a-machine-configuration-cis-linux-baseline/"
                    }
                ]
            },
            {
                "@type": [
                    "Article",
                    "TechArticle"
                ],
                "@id": "https://update.dsesecurity.com/updates/dse-20260917-143-select-every-intended-distribution-in-a-machine-configuration-cis-linux-baseline/#article",
                "identifier": "https://update.dsesecurity.com/updates/dse-20260917-143-select-every-intended-distribution-in-a-machine-configuration-cis-linux-baseline/",
                "url": "https://update.dsesecurity.com/updates/dse-20260917-143-select-every-intended-distribution-in-a-machine-configuration-cis-linux-baseline/",
                "headline": "Select every intended distribution in a Machine Configuration CIS Linux baseline",
                "description": "CIS Linux distribution selection determines which systems the customized benchmark evaluates.",
                "abstract": "CIS Linux distribution selection determines which systems the customized benchmark evaluates.",
                "articleBody": "Source facts\nMicrosoft’s CIS Benchmarks for Linux customization guidance allows one or more supported distributions to be enabled and a benchmark version chosen for each. Distributions left unselected are excluded from evaluation. This customization therefore carries both distribution and benchmark-version choices. Microsoft Learn.\nApplicability\nUse this review when preparing a customized Machine Configuration CIS Linux baseline. Establish the intended machine inventory and distributions before choosing settings. The source’s supported choices must be checked against the actual machines; this article does not claim every Linux release is supported. This distribution selection applies to CIS Benchmarks for Linux; the source says Azure Security Baselines for Windows and Linux do not require it.\nDSE recommendation\nDSE recommends making a distribution-to-benchmark worksheet part of baseline review. Ask the platform owner to account for each intended distribution and explicitly approve any exclusion. Keep the exported configuration artifact with that worksheet. Test representative machines from each selected population before treating the resulting report as coverage of the full intended estate.\nVerification\nCompare the exported settings with the approved distribution list and benchmark versions. Inspect evaluation evidence from one representative machine in each selected population, then confirm that deliberately excluded populations are documented as outside scope. Investigate an absent result before interpreting it as compliance. Retain the inventory snapshot and baseline artifact used for the coverage decision.\nOfficial references\nMicrosoft Learn: Specify Custom Parameters For Baseline Policy.",
                "datePublished": "2026-09-17T16:32:37+00:00",
                "dateModified": "2026-09-17T16:42:36+00:00",
                "mainEntityOfPage": {
                    "@id": "https://update.dsesecurity.com/updates/dse-20260917-143-select-every-intended-distribution-in-a-machine-configuration-cis-linux-baseline/"
                },
                "inLanguage": "en-US",
                "isAccessibleForFree": true,
                "author": {
                    "@type": "Organization",
                    "name": "DSE Security Editorial Team",
                    "url": "https://update.dsesecurity.com/#editorial-team"
                },
                "publisher": {
                    "@id": "https://dsesecurity.com/#organization"
                },
                "image": {
                    "@type": "ImageObject",
                    "@id": "https://update.dsesecurity.com/updates/dse-20260917-143-select-every-intended-distribution-in-a-machine-configuration-cis-linux-baseline/#primaryimage",
                    "url": "https://update.dsesecurity.com/assets/editorial/cyber-defense-social-v2.jpg?v=1.8.20",
                    "contentUrl": "https://update.dsesecurity.com/assets/editorial/cyber-defense-social-v2.jpg?v=1.8.20",
                    "width": 1200,
                    "height": 630,
                    "caption": "Select every intended distribution in a Machine Configuration CIS Linux baseline"
                },
                "articleSection": [
                    "Cybersecurity",
                    "IT"
                ],
                "keywords": [
                    "Cybersecurity",
                    "IT",
                    "Guide",
                    "Information priority"
                ],
                "genre": "Guide",
                "about": [
                    {
                        "@type": "Thing",
                        "name": "Cybersecurity",
                        "url": "https://update.dsesecurity.com/topic/cybersecurity/"
                    },
                    {
                        "@type": "Thing",
                        "name": "IT",
                        "url": "https://update.dsesecurity.com/topic/it/"
                    }
                ],
                "wordCount": 230,
                "timeRequired": "PT2M",
                "publishingPrinciples": "https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/",
                "usageInfo": "https://update.dsesecurity.com/usage/",
                "copyrightHolder": {
                    "@id": "https://dsesecurity.com/#organization"
                },
                "copyrightNotice": "Copyright © 2026 Detection Systems & Engineering. All rights reserved.",
                "citation": {
                    "@type": "CreativeWork",
                    "name": "Specify Custom Parameters For Baseline Policy - Azure Machine Configuration | Microsoft Learn",
                    "url": "https://learn.microsoft.com/en-us/azure/governance/machine-configuration/how-to/assign-security-baselines/specify-custom-parameters-for-baseline-policy"
                }
            }
        ]
    }
}