# Select every intended distribution in a Machine Configuration CIS Linux baseline

> CIS Linux distribution selection determines which systems the customized benchmark evaluates.

- Canonical URL: https://update.dsesecurity.com/updates/dse-20260917-143-select-every-intended-distribution-in-a-machine-configuration-cis-linux-baseline/
- Publisher: Detection Systems & Engineering (DSE Security)
- Author: DSE Security Editorial Team
- Published: 2026-09-17T16:32:37+00:00
- Modified: 2026-09-17T16:42:36+00:00
- Last reviewed by DSE: 2026-09-17
- Resource type: Guide
- DSE priority: Information
- Topics: Cybersecurity, IT
- Reading time: 2 minutes

## What you need to know

CIS Linux distribution selection determines which systems the customized benchmark evaluates.

## Potentially affected

Use this review when preparing a customized Machine Configuration CIS Linux baseline. Establish the intended machine inventory and distributions before choosing settings. The source's supported choices must be checked against the actual machines; this article does not claim every Linux release is supported. This distribution selection applies to CIS Benchmarks for Linux; the source says Azure Security Baselines for Windows and Linux do not require it.

## DSE recommendation

DSE recommends making a distribution-to-benchmark worksheet part of baseline review.

## Article

## Source facts

Microsoft’s CIS Benchmarks for Linux customization guidance allows one or more supported distributions to be enabled and a benchmark version chosen for each. Distributions left unselected are excluded from evaluation. This customization therefore carries both distribution and benchmark-version choices. [Microsoft Learn](https://learn.microsoft.com/en-us/azure/governance/machine-configuration/how-to/assign-security-baselines/specify-custom-parameters-for-baseline-policy).

## Applicability

Use this review when preparing a customized Machine Configuration CIS Linux baseline. Establish the intended machine inventory and distributions before choosing settings. The source’s supported choices must be checked against the actual machines; this article does not claim every Linux release is supported. This distribution selection applies to CIS Benchmarks for Linux; the source says Azure Security Baselines for Windows and Linux do not require it.

## DSE recommendation

DSE recommends making a distribution-to-benchmark worksheet part of baseline review. Ask the platform owner to account for each intended distribution and explicitly approve any exclusion. Keep the exported configuration artifact with that worksheet. Test representative machines from each selected population before treating the resulting report as coverage of the full intended estate.

## Verification

Compare the exported settings with the approved distribution list and benchmark versions. Inspect evaluation evidence from one representative machine in each selected population, then confirm that deliberately excluded populations are documented as outside scope. Investigate an absent result before interpreting it as compliance. Retain the inventory snapshot and baseline artifact used for the coverage decision.

## Official references

[Microsoft Learn: Specify Custom Parameters For Baseline Policy](https://learn.microsoft.com/en-us/azure/governance/machine-configuration/how-to/assign-security-baselines/specify-custom-parameters-for-baseline-policy).

## Primary reference

- Name: Specify Custom Parameters For Baseline Policy - Azure Machine Configuration | Microsoft Learn
- Authority: Microsoft Learn
- URL: https://learn.microsoft.com/en-us/azure/governance/machine-configuration/how-to/assign-security-baselines/specify-custom-parameters-for-baseline-policy
- Source publication date: Not stated by the source

## Citation and use

Preferred citation: “Select every intended distribution in a Machine Configuration CIS Linux baseline,” DSE Security, https://update.dsesecurity.com/updates/dse-20260917-143-select-every-intended-distribution-in-a-machine-configuration-cis-linux-baseline/
Publishing principles: https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/
Usage and citation policy: https://update.dsesecurity.com/usage/
Copyright © 2026 Detection Systems & Engineering. All rights reserved.