Rule explorer
Browse every hardening rule in the catalog. Filter by platform, severity, profile level and whether the check can be automated.
119 rules foundof 11,219Page 2 of 5
| ID | Title | Platform | Severity | Level | Check |
|---|---|---|---|---|---|
| TMA-DOCKER-4.9 | Ensure secrets are not stored in Dockerfilesdocker · Level 1 | docker | High | 1 | Manual review |
| TMA-DOCKER-4.11 | Ensure all signed artifacts are validateddocker · Level 1 | docker | High | 1 | Manual review |
| TMA-DOCKER-5.6 | Ensure sensitive host system directories are not mounted on containersdocker · Level 1 | docker | High | 1 | Automated |
| TMA-DOCKER-5.10 | Ensure that the host's network namespace is not shareddocker · Level 1 | docker | High | 1 | Automated |
| TMA-DOCKER-5.16 | Ensure that the host's process namespace is not shareddocker · Level 1 | docker | High | 1 | Automated |
| TMA-DOCKER-5.17 | Ensure that the host's IPC namespace is not shareddocker · Level 1 | docker | High | 1 | Automated |
| TMA-DOCKER-5.22 | Ensure the default seccomp profile is not Disableddocker · Level 1 | docker | High | 1 | Automated |
| TMA-DOCKER-5.23 | Ensure that docker exec commands are not used with the privileged optiondocker · Level 2 | docker | High | 2 | Manual review |
| TMA-DOCKER-5.24 | Ensure that docker exec commands are not used with the user=root optiondocker · Level 2 | docker | High | 2 | Manual review |
| TMA-DOCKER-5.26 | Ensure that the container is restricted from acquiring additional privilegesdocker · Level 1 | docker | High | 1 | Automated |
| TMA-DOCKER-7.4 | Ensure that Docker's secret management commands are used for managing secrets in a swarm clusterdocker · Level 1 | docker | High | 1 | Manual review |
| TMA-DOCKER-SOCK-PERMS | Ensure docker.sock is owned by root:docker with mode 660docker · Level 1 | docker | High | 1 | Automated |
| TMA-DOCKER-1.1.1 | Ensure a separate partition for containers has been createddocker · Level 1 | docker | Medium | 1 | Automated |
| TMA-DOCKER-1.1.2 | Ensure only trusted users are allowed to control Docker daemondocker · Level 1 | docker | Medium | 1 | Manual review |
| TMA-DOCKER-1.1.3 | Ensure auditing is configured for the Docker daemondocker · Level 1 | docker | Medium | 1 | Automated |
| TMA-DOCKER-1.1.4 | Ensure auditing is configured for Docker files and directories - /run/containerddocker · Level 1 | docker | Medium | 1 | Automated |
| TMA-DOCKER-1.1.5 | Ensure auditing is configured for Docker files and directories - /var/lib/dockerdocker · Level 1 | docker | Medium | 1 | Automated |
| TMA-DOCKER-1.1.6 | Ensure auditing is configured for Docker files and directories - /etc/dockerdocker · Level 1 | docker | Medium | 1 | Automated |
| TMA-DOCKER-1.1.7 | Ensure auditing is configured for Docker files and directories - docker.servicedocker · Level 2 | docker | Medium | 2 | Automated |
| TMA-DOCKER-1.1.8 | Ensure auditing is configured for Docker files and directories - containerd.sockdocker · Level 2 | docker | Medium | 2 | Automated |
| TMA-DOCKER-1.1.9 | Ensure auditing is configured for Docker files and directories - docker.sockdocker · Level 2 | docker | Medium | 2 | Automated |
| TMA-DOCKER-1.1.10 | Ensure auditing is configured for Docker files and directories - /etc/default/dockerdocker · Level 2 | docker | Medium | 2 | Automated |
| TMA-DOCKER-1.1.11 | Ensure auditing is configured for Docker files and directories - /etc/docker/daemon.jsondocker · Level 2 | docker | Medium | 2 | Automated |
| TMA-DOCKER-1.1.12 | Ensure auditing is configured for Docker files and directories - /etc/containerd/config.tomldocker · Level 2 | docker | Medium | 2 | Automated |
| TMA-DOCKER-1.1.13 | Ensure auditing is configured for Docker files and directories - /etc/sysconfig/dockerdocker · Level 2 | docker | Medium | 2 | Automated |