Rule explorer
Browse every hardening rule in the catalogue. Filter by platform, severity, profile level and whether the check can be automated.
106 rules foundof 11,219Page 1 of 5
| ID | Title | Platform | Severity | Level | Check |
|---|---|---|---|---|---|
| TMA-TDSQL-2.6 | Ensure Default Configuration Passwords Have Been Changedtdsql · Level 1 | tdsql | Critical | 1 | Manual review |
| TMA-TDSQL-4.4 | Ensure `skip-grant-tables` Is Disabledtdsql · Level 1 | tdsql | Critical | 1 | Automated |
| TMA-TDSQL-5.8 | Ensure Authentication Is Enabled on the OSS Management Platformtdsql · Level 1 | tdsql | Critical | 1 | Automated |
| TMA-TDSQL-5.9 | Ensure the OSS Super User Password Has Been Changedtdsql · Level 1 | tdsql | Critical | 1 | Manual review |
| TMA-TDSQL-11.2 | Ensure ZooKeeper Authentication Credentials Have Been Changedtdsql · Level 1 | tdsql | Critical | 1 | Manual review |
| TMA-TDSQL-1.2 | Ensure a Dedicated Least-Privilege Account Is Used for TDSQL Processestdsql · Level 1 | tdsql | High | 1 | Automated |
| TMA-TDSQL-1.4 | Ensure MYSQL_PWD and Sensitive Environment Variables Are Not Usedtdsql · Level 1 | tdsql | High | 1 | Automated |
| TMA-TDSQL-1.5 | Ensure Passwords Are Not Passed via the Command Linetdsql · Level 1 | tdsql | High | 1 | Automated |
| TMA-TDSQL-1.6 | Ensure Operating System Patches Are Up to Datetdsql · Level 1 | tdsql | High | 1 | Automated |
| TMA-TDSQL-2.2 | Ensure TDSQL Is Installed from a Trusted Sourcetdsql · Level 1 | tdsql | High | 1 | Manual review |
| TMA-TDSQL-2.3 | Ensure a Backup and Recovery Strategy Is Configuredtdsql · Level 1 | tdsql | High | 1 | Manual review |
| TMA-TDSQL-2.4 | Ensure Backup Data Is Encryptedtdsql · Level 2 | tdsql | High | 2 | Manual review |
| TMA-TDSQL-2.7 | Ensure Sensitive Configuration Data Is Encryptedtdsql · Level 1 | tdsql | High | 1 | Manual review |
| TMA-TDSQL-3.1 | Ensure Correct Permissions on TDSQL Data Directoriestdsql · Level 1 | tdsql | High | 1 | Automated |
| TMA-TDSQL-3.3 | Ensure Correct Permissions on TDSQL Configuration Filestdsql · Level 1 | tdsql | High | 1 | Automated |
| TMA-TDSQL-3.4 | Ensure Correct Permissions on SSL/TLS Certificate Filestdsql · Level 1 | tdsql | High | 1 | Automated |
| TMA-TDSQL-3.5 | Ensure Correct Permissions on the TDSQL Binary Directorytdsql · Level 1 | tdsql | High | 1 | Automated |
| TMA-TDSQL-3.6 | Ensure Correct Permissions on the TDSQL Boot Directorytdsql · Level 1 | tdsql | High | 1 | Automated |
| TMA-TDSQL-3.7 | Ensure Correct Permissions on Backup Directoriestdsql · Level 1 | tdsql | High | 1 | Automated |
| TMA-TDSQL-3.8 | Ensure Correct Permissions on MySQL Tablespace Filestdsql · Level 1 | tdsql | High | 1 | Automated |
| TMA-TDSQL-3.9 | Ensure Correct Permissions on MySQL Binary Log Filestdsql · Level 1 | tdsql | High | 1 | Automated |
| TMA-TDSQL-3.12 | Ensure Correct Permissions on Audit Log Filestdsql · Level 2 | tdsql | High | 2 | Automated |
| TMA-TDSQL-4.1 | Ensure `local_infile` Is Disabledtdsql · Level 1 | tdsql | High | 1 | Automated |
| TMA-TDSQL-5.1 | Ensure No Anonymous Accounts Existtdsql · Level 1 | tdsql | High | 1 | Automated |
| TMA-TDSQL-5.2 | Ensure the `root` Account Is Disabled or Hardenedtdsql · Level 1 | tdsql | High | 1 | Manual review |