CIS Benchmark Status
CIS Kubernetes Benchmark v1.9.0 and CIS Distribution Independent Linux L1 control implementation status in Kairos
SELinux
How SELinux works on Kairos, which bases support it, how to turn it on with install.selinux, and how labels are kept on an immutable system.