Rule explorer
Browse every hardening rule in the catalog. Filter by platform, severity, profile level and whether the check can be automated.
148 rules foundof 11,219Page 2 of 6
| ID | Title | Platform | Severity | Level | Check |
|---|---|---|---|---|---|
| TMA-FREEBSD-4.3.3 | Ensure sudo log file existsfreebsd · Level 1 | freebsd | High | 1 | Automated |
| TMA-FREEBSD-4.3.4 | Ensure users must provide password for escalationfreebsd · Level 2 | freebsd | High | 2 | Automated |
| TMA-FREEBSD-4.3.5 | Ensure re-authentication for privilege escalation is not disabled globallyfreebsd · Level 1 | freebsd | High | 1 | Automated |
| TMA-FREEBSD-4.3.6 | Ensure sudo authentication timeout is configured correctlyfreebsd · Level 1 | freebsd | High | 1 | Automated |
| TMA-FREEBSD-4.3.7 | Ensure access to the su command is restrictedfreebsd · Level 1 | freebsd | High | 1 | Automated |
| TMA-FREEBSD-4.4.1.1.1 | Ensure password length is configuredfreebsd · Level 1 | freebsd | High | 1 | Manual review |
| TMA-FREEBSD-4.4.1.1.2 | Ensure password quality is enforced for the root userfreebsd · Level 1 | freebsd | High | 1 | Automated |
| TMA-FREEBSD-4.5.1.1 | Ensure strong password hashing algorithm is configuredfreebsd · Level 1 | freebsd | High | 1 | Automated |
| TMA-FREEBSD-4.5.1.2 | Ensure password expiration is 365 days or lessfreebsd · Level 1 | freebsd | High | 1 | Automated |
| TMA-FREEBSD-4.5.2.1 | Ensure default group for the root account is GID 0freebsd · Level 1 | freebsd | High | 1 | Automated |
| TMA-FREEBSD-4.5.2.2 | Ensure root user umask is configuredfreebsd · Level 1 | freebsd | High | 1 | Automated |
| TMA-FREEBSD-5.2.3.2 | Ensure events that modify the sudo log file are collectedfreebsd · Level 2 | freebsd | High | 2 | Automated |
| TMA-FREEBSD-5.2.3.3 | Ensure use of privileged commands are collectedfreebsd · Level 2 | freebsd | High | 2 | Automated |
| TMA-FREEBSD-5.2.4.3 | Ensure only authorized users own audit log filesfreebsd · Level 2 | freebsd | High | 2 | Automated |
| TMA-FREEBSD-5.2.4.4 | Ensure only authorized groups are assigned ownership of audit log filesfreebsd · Level 2 | freebsd | High | 2 | Automated |
| TMA-FREEBSD-5.2.4.6 | Ensure audit configuration files are owned by rootfreebsd · Level 2 | freebsd | High | 2 | Automated |
| TMA-FREEBSD-5.2.4.9 | Ensure audit tools are owned by rootfreebsd · Level 2 | freebsd | High | 2 | Automated |
| TMA-FREEBSD-6.1.5 | Ensure world writable files and directories are securedfreebsd · Level 1 | freebsd | High | 1 | Automated |
| TMA-FREEBSD-6.1.6 | Ensure no unowned or ungrouped files or directories existfreebsd · Level 1 | freebsd | High | 1 | Automated |
| TMA-FREEBSD-6.1.7 | Ensure SUID and SGID files are reviewedfreebsd · Level 1 | freebsd | High | 1 | Manual review |
| TMA-FREEBSD-6.2.1 | Ensure accounts in /etc/master.passwd use shadowed passwordsfreebsd · Level 1 | freebsd | High | 1 | Manual review |
| TMA-FREEBSD-6.2.8 | Ensure root path integrityfreebsd · Level 1 | freebsd | High | 1 | Automated |
| TMA-FREEBSD-1.1.1.1 | Ensure ext2fs kernel module is not availablefreebsd · Level 1 | freebsd | Medium | 1 | Automated |
| TMA-FREEBSD-1.1.1.2 | Ensure msdosfs kernel module is not availablefreebsd · Level 1 | freebsd | Medium | 1 | Automated |
| TMA-FREEBSD-1.1.1.3 | Ensure zfs kernel module is not availablefreebsd · Level 1 | freebsd | Medium | 1 | Automated |