Rule explorer
Browse every hardening rule in the catalog. Filter by platform, severity, profile level and whether the check can be automated.
119 rules foundof 11,219Page 2 of 5
| ID | Title | Platform | Severity | Level | Check |
|---|---|---|---|---|---|
| TMA-COS-2.1.1.2 | Ensure chrony is configuredcos · Level 2 | cos | Medium | 2 | Manual review |
| TMA-COS-2.1.2 | Ensure X Window System is not installedcos · Level 1 | cos | Medium | 1 | Manual review |
| TMA-COS-2.1.3 | Ensure NFS and RPC are not enabledcos · Level 1 | cos | Medium | 1 | Automated |
| TMA-COS-2.1.4 | Ensure rsync service is not enabledcos · Level 1 | cos | Medium | 1 | Automated |
| TMA-COS-3.1.1 | Ensure packet redirect sending is disabledcos · Level 1 | cos | Medium | 1 | Automated |
| TMA-COS-3.2.5 | Ensure broadcast ICMP requests are ignoredcos · Level 1 | cos | Medium | 1 | Automated |
| TMA-COS-3.2.6 | Ensure bogus ICMP responses are ignoredcos · Level 1 | cos | Medium | 1 | Automated |
| TMA-COS-3.2.7 | Ensure Reverse Path Filtering is enabledcos · Level 1 | cos | Medium | 1 | Automated |
| TMA-COS-3.2.8 | Ensure TCP SYN Cookies is enabledcos · Level 1 | cos | Medium | 1 | Automated |
| TMA-COS-3.3.3 | Ensure iptables is installedcos · Level 1 | cos | Medium | 1 | Manual review |
| TMA-COS-4.1.2.2 | Ensure journald is configured to write logfiles to persistent diskcos · Level 1 | cos | Medium | 1 | Manual review |
| TMA-COS-5.1.1 | Ensure permissions on /etc/ssh/sshd_config are configuredcos · Level 1 | cos | Medium | 1 | Automated |
| TMA-COS-5.1.2 | Ensure permissions on SSH private host key files are configuredcos · Level 1 | cos | Medium | 1 | Automated |
| TMA-COS-5.1.3 | Ensure permissions on SSH public host key files are configuredcos · Level 1 | cos | Medium | 1 | Automated |
| TMA-COS-5.1.4 | Ensure SSH Protocol is set to 2cos · Level 1 | cos | Medium | 1 | Automated |
| TMA-COS-5.1.5 | Ensure SSH LogLevel is appropriatecos · Level 1 | cos | Medium | 1 | Manual review |
| TMA-COS-5.1.6 | Ensure SSH X11 forwarding is disabledcos · Level 1 | cos | Medium | 1 | Automated |
| TMA-COS-5.1.8 | Ensure SSH IgnoreRhosts is enabledcos · Level 1 | cos | Medium | 1 | Automated |
| TMA-COS-5.1.9 | Ensure SSH HostbasedAuthentication is disabledcos · Level 1 | cos | Medium | 1 | Automated |
| TMA-COS-5.1.10 | Ensure SSH root login is disabledcos · Level 1 | cos | Medium | 1 | Automated |
| TMA-COS-5.1.11 | Ensure SSH PermitEmptyPasswords is disabledcos · Level 1 | cos | Medium | 1 | Automated |
| TMA-COS-5.1.12 | Ensure SSH PermitUserEnvironment is disabledcos · Level 1 | cos | Medium | 1 | Automated |
| TMA-COS-5.1.13 | Ensure only strong Ciphers are usedcos · Level 1 | cos | Medium | 1 | Automated |
| TMA-COS-5.1.15 | Ensure only strong Key Exchange algorithms are usedcos · Level 1 | cos | Medium | 1 | Automated |
| TMA-COS-5.1.19 | Ensure SSH PAM is enabledcos · Level 1 | cos | Medium | 1 | Automated |