Security hardening, published, not just claimed
A STIG (Security Technical Implementation Guide) is a formal, DoD-published configuration standard for locking down a system — every setting an auditor will check, documented and testable. 45Drives publishes its own STIG overlay repository: specific hardening profiles for Rocky Linux 8 and Rocky Linux 9, layered on top of the baseline STIG using InSpec-based automated compliance checks, plus a full recorded audit run as evidence.
Why this matters for a storage server
Government agencies, defense contractors, and regulated industries can’t just take a vendor’s word that a system is “secure” — they need an auditable configuration standard and evidence it was actually applied. This is directly relevant to the CMMC (Cybersecurity Maturity Model Certification) self-assessment requirements now facing government and defense contractors: having a published, testable hardening overlay is the kind of artifact a compliance review actually asks for.
How 45Drives uses it
The repository contains overlay profiles for both Rocky Linux 8 and 9 — 45Drives’ hardening additions on top of the baseline OS STIG — along with a dated, full audit report showing the overlay actually being run and evaluated, not just a checklist that’s never been executed.
A related tool worth knowing about
45Drives also tracks sedutil, an open-source utility
for managing Self-Encrypting Drives (SEDs) — hardware-level drive encryption, a common
requirement alongside OS-level hardening in regulated environments.
Why that matters if you’re evaluating storage
- Auditable, not just asserted. The overlay and the audit evidence are both public — nothing to take on faith.
- Built for the standard regulated customers actually have to meet, not a generic “security-hardened” marketing claim.
- Consistent with everything else on this site: even the compliance tooling is open source, not a paid add-on module.
Learn more
45Drives/45drives-stigon GitHub- public.cyber.mil/stigs — the official DoD STIG program
45Drives/sedutilon GitHub