Rule explorer
Browse every hardening rule in the catalog. Filter by platform, severity, profile level and whether the check can be automated.
74 rules foundof 16,927Page 2 of 3
| ID | Title | Platform | Severity | Level | Check |
|---|---|---|---|---|---|
| TMA-POSTGRES-4.1 | Ensure Interactive Login is Disabledpostgres · Level 1 | postgres | Medium | 1 | Manual review |
| TMA-POSTGRES-4.2 | Ensure sudo is configured correctlypostgres · Level 1 | postgres | Medium | 1 | Manual review |
| TMA-POSTGRES-4.4 | Lock Out Accounts if Not Currently in Usepostgres · Level 1 | postgres | Medium | 1 | Manual review |
| TMA-POSTGRES-4.5 | Ensure excessive function privileges are revokedpostgres · Level 1 | postgres | Medium | 1 | Automated |
| TMA-POSTGRES-4.6 | Ensure excessive DML privileges are revokedpostgres · Level 1 | postgres | Medium | 1 | Manual review |
| TMA-POSTGRES-4.7 | Ensure Row Level Security (RLS) is configured correctlypostgres · Level 1 | postgres | Medium | 1 | Manual review |
| TMA-POSTGRES-4.8 | Ensure the set_user extension is installedpostgres · Level 1 | postgres | Medium | 1 | Automated |
| TMA-POSTGRES-4.9 | Make use of predefined rolespostgres · Level 1 | postgres | Medium | 1 | Manual review |
| TMA-POSTGRES-5.1 | Do Not Specify Passwords in the Command Linepostgres · Level 1 | postgres | Medium | 1 | Manual review |
| TMA-POSTGRES-5.2 | Ensure PostgreSQL is Bound to an IP Addresspostgres · Level 1 | postgres | Medium | 1 | Manual review |
| TMA-POSTGRES-5.6 | Ensure Password Complexity is configuredpostgres · Level 1 | postgres | Medium | 1 | Manual review |
| TMA-POSTGRES-6.2 | Ensure 'backend' runtime parameters are configured correctlypostgres · Level 1 | postgres | Medium | 1 | Automated |
| TMA-POSTGRES-6.7 | Ensure FIPS 140-2 OpenSSL Cryptography Is Usedpostgres · Level 1 | postgres | Medium | 1 | Automated |
| TMA-POSTGRES-6.10 | Ensure Weak SSL/TLS Ciphers Are Disabledpostgres · Level 1 | postgres | Medium | 1 | Automated |
| TMA-POSTGRES-7.1 | Ensure a replication-only user is created and used for streaming replicationpostgres · Level 1 | postgres | Medium | 1 | Manual review |
| TMA-POSTGRES-7.3 | Ensure base backups are configured and functionalpostgres · Level 1 | postgres | Medium | 1 | Manual review |
| TMA-POSTGRES-7.4 | Ensure WAL archiving is configured and functionalpostgres · Level 1 | postgres | Medium | 1 | Automated |
| TMA-POSTGRES-7.5 | Ensure streaming replication parameters are configured correctlypostgres · Level 1 | postgres | Medium | 1 | Manual review |
| TMA-POSTGRES-1.2 | Install only required packagespostgres · Level 1 | postgres | Low | 1 | Manual review |
| TMA-POSTGRES-1.3 | Ensure systemd Service Files Are Enabledpostgres · Level 1 | postgres | Low | 1 | Automated |
| TMA-POSTGRES-2.3 | Disable PostgreSQL Command Historypostgres · Level 1 | postgres | Low | 1 | Automated |
| TMA-POSTGRES-3.1.2 | Ensure the log destinations are set correctlypostgres · Level 1 | postgres | Low | 1 | Manual review |
| TMA-POSTGRES-3.1.4 | Ensure the log file destination directory is set correctlypostgres · Level 1 | postgres | Low | 1 | Manual review |
| TMA-POSTGRES-3.1.5 | Ensure the filename pattern for log files is set correctlypostgres · Level 1 | postgres | Low | 1 | Manual review |
| TMA-POSTGRES-3.1.7 | Ensure 'log_truncate_on_rotation' is enabledpostgres · Level 1 | postgres | Low | 1 | Automated |