Rule explorer
Browse every hardening rule in the catalogue. Filter by platform, severity, profile level and whether the check can be automated.
116 rules foundof 11,219Page 1 of 5
| ID | Title | Platform | Severity | Level | Check |
|---|---|---|---|---|---|
| TMA-AZURE-CONTAINER-LINUX-1.4.8 | Ensure unprivileged eBPF is disabledazure-container-linux · Level 1 | azure-container-linux | High | 1 | Automated |
| TMA-AZURE-CONTAINER-LINUX-5.2.11 | Ensure sshd GSSAPIAuthentication is disabledazure-container-linux · Level 2 | azure-container-linux | High | 2 | Automated |
| TMA-AZURE-CONTAINER-LINUX-5.2.12 | Ensure sshd HostbasedAuthentication is disabledazure-container-linux · Level 1 | azure-container-linux | High | 1 | Automated |
| TMA-AZURE-CONTAINER-LINUX-5.2.19 | Ensure sshd PermitEmptyPasswords is disabledazure-container-linux · Level 1 | azure-container-linux | High | 1 | Automated |
| TMA-AZURE-CONTAINER-LINUX-5.2.20 | Ensure sshd PermitRootLogin is disabledazure-container-linux · Level 1 | azure-container-linux | High | 1 | Automated |
| TMA-AZURE-CONTAINER-LINUX-5.3.1 | Ensure re-authentication for privilege escalation is not disabled globallyazure-container-linux · Level 1 | azure-container-linux | High | 1 | Automated |
| TMA-AZURE-CONTAINER-LINUX-5.3.2 | Ensure sudo authentication timeout is configured correctlyazure-container-linux · Level 1 | azure-container-linux | High | 1 | Automated |
| TMA-AZURE-CONTAINER-LINUX-5.4.1 | Ensure password creation requirements are configuredazure-container-linux · Level 1 | azure-container-linux | High | 1 | Automated |
| TMA-AZURE-CONTAINER-LINUX-5.4.2 | Ensure lockout for failed password attempts is configuredazure-container-linux · Level 1 | azure-container-linux | High | 1 | Automated |
| TMA-AZURE-CONTAINER-LINUX-5.4.3 | Ensure password hashing algorithm is SHA-512azure-container-linux · Level 1 | azure-container-linux | High | 1 | Automated |
| TMA-AZURE-CONTAINER-LINUX-5.4.4 | Ensure password reuse is limitedazure-container-linux · Level 1 | azure-container-linux | High | 1 | Automated |
| TMA-AZURE-CONTAINER-LINUX-5.5.1.1 | Ensure password expiration is 365 days or lessazure-container-linux · Level 1 | azure-container-linux | High | 1 | Automated |
| TMA-AZURE-CONTAINER-LINUX-5.5.1.2 | Ensure minimum days between password changes is configuredazure-container-linux · Level 1 | azure-container-linux | High | 1 | Automated |
| TMA-AZURE-CONTAINER-LINUX-5.5.1.3 | Ensure password expiration warning days is 7 or moreazure-container-linux · Level 1 | azure-container-linux | High | 1 | Automated |
| TMA-AZURE-CONTAINER-LINUX-5.5.1.4 | Ensure inactive password lock is 30 days or lessazure-container-linux · Level 1 | azure-container-linux | High | 1 | Automated |
| TMA-AZURE-CONTAINER-LINUX-5.5.1.5 | Ensure all users last password change date is in the pastazure-container-linux · Level 1 | azure-container-linux | High | 1 | Automated |
| TMA-AZURE-CONTAINER-LINUX-5.5.3 | Ensure default group for the root account is GID 0azure-container-linux · Level 1 | azure-container-linux | High | 1 | Automated |
| TMA-AZURE-CONTAINER-LINUX-7.2.1 | Ensure accounts in /etc/passwd use shadowed passwordsazure-container-linux · Level 1 | azure-container-linux | High | 1 | Automated |
| TMA-AZURE-CONTAINER-LINUX-7.2.2 | Ensure /etc/shadow password fields are not emptyazure-container-linux · Level 1 | azure-container-linux | High | 1 | Automated |
| TMA-AZURE-CONTAINER-LINUX-1.1.1.1 | Ensure cramfs kernel module is not availableazure-container-linux · Level 1 | azure-container-linux | Medium | 1 | Automated |
| TMA-AZURE-CONTAINER-LINUX-1.1.1.2 | Ensure freevxfs kernel module is not availableazure-container-linux · Level 1 | azure-container-linux | Medium | 1 | Automated |
| TMA-AZURE-CONTAINER-LINUX-1.1.1.3 | Ensure hfs kernel module is not availableazure-container-linux · Level 1 | azure-container-linux | Medium | 1 | Automated |
| TMA-AZURE-CONTAINER-LINUX-1.1.1.4 | Ensure hfsplus kernel module is not availableazure-container-linux · Level 1 | azure-container-linux | Medium | 1 | Automated |
| TMA-AZURE-CONTAINER-LINUX-1.1.1.5 | Ensure jffs2 kernel module is not availableazure-container-linux · Level 1 | azure-container-linux | Medium | 1 | Automated |
| TMA-AZURE-CONTAINER-LINUX-1.1.1.7 | Ensure unused filesystems kernel modules are not availableazure-container-linux · Level 1 | azure-container-linux | Medium | 1 | Manual review |