Rule explorer
Browse every hardening rule in the catalog. Filter by platform, severity, profile level and whether the check can be automated.
228 rules foundof 11,219Page 2 of 10
| ID | Title | Platform | Severity | Level | Check |
|---|---|---|---|---|---|
| TMA-ROS1-1.1.18 | Ensure nodev option set on removable media partitionsros · Level 1 | ros | Medium | 1 | Manual review |
| TMA-ROS1-1.1.19 | Ensure nosuid option set on removable media partitionsros · Level 1 | ros | Medium | 1 | Manual review |
| TMA-ROS1-1.1.20 | Ensure noexec option set on removable media partitionsros · Level 1 | ros | Medium | 1 | Manual review |
| TMA-ROS1-1.1.21 | Ensure sticky bit is set on all world-writable directoriesros · Level 1 | ros | Medium | 1 | Automated |
| TMA-ROS1-1.1.22 | Disable Automountingros · Level 1 | ros | Medium | 1 | Automated |
| TMA-ROS1-1.2.1 | Ensure package manager repositories are configuredros · Level 1 | ros | Medium | 1 | Manual review |
| TMA-ROS1-1.2.2 | Ensure GPG keys are configuredros · Level 1 | ros | Medium | 1 | Manual review |
| TMA-ROS1-1.3.1 | Ensure sudo is installedros · Level 1 | ros | Medium | 1 | Automated |
| TMA-ROS1-1.3.2 | Ensure sudo commands use ptyros · Level 1 | ros | Medium | 1 | Automated |
| TMA-ROS1-1.3.3 | Ensure sudo log file existsros · Level 1 | ros | Medium | 1 | Automated |
| TMA-ROS1-1.4.1 | Ensure AIDE is installedros · Level 1 | ros | Medium | 1 | Automated |
| TMA-ROS1-1.4.2 | Ensure filesystem integrity is regularly checkedros · Level 1 | ros | Medium | 1 | Automated |
| TMA-ROS1-1.5.1 | Ensure permissions on bootloader config are configuredros · Level 1 | ros | Medium | 1 | Automated |
| TMA-ROS1-1.5.2 | Ensure bootloader password is setros · Level 1 | ros | Medium | 1 | Automated |
| TMA-ROS1-1.5.3 | Ensure authentication required for single user moderos · Level 1 | ros | Medium | 1 | Automated |
| TMA-ROS1-1.5.4 | Ensure interactive boot is not enabledros · Level 1 | ros | Medium | 1 | Manual review |
| TMA-ROS1-1.6.1 | Ensure XD/NX support is enabledros · Level 1 | ros | Medium | 1 | Automated |
| TMA-ROS1-1.6.2 | Ensure address space layout randomization (ASLR) is enabledros · Level 1 | ros | Medium | 1 | Automated |
| TMA-ROS1-1.6.3 | Ensure prelink is disabledros · Level 1 | ros | Medium | 1 | Automated |
| TMA-ROS1-1.6.4 | Ensure core dumps are restrictedros · Level 1 | ros | Medium | 1 | Automated |
| TMA-ROS1-1.7.1.1 | Ensure AppArmor is installedros · Level 1 | ros | Medium | 1 | Automated |
| TMA-ROS1-1.7.1.2 | Ensure AppArmor is enabled in the bootloader configurationros · Level 1 | ros | Medium | 1 | Automated |
| TMA-ROS1-1.7.1.3 | Ensure all AppArmor Profiles are in enforce or complain moderos · Level 1 | ros | Medium | 1 | Automated |
| TMA-ROS1-1.7.1.4 | Ensure all AppArmor Profiles are enforcingros · Level 1 | ros | Medium | 1 | Automated |
| TMA-ROS1-1.9 | Ensure updates, patches, and additional security software are installedros · Level 1 | ros | Medium | 1 | Manual review |