Rule explorer
Browse every hardening rule in the catalog. Filter by platform, severity, profile level and whether the check can be automated.
106 rules foundof 16,927Page 2 of 5
| ID | Title | Platform | Severity | Level | Check |
|---|---|---|---|---|---|
| TMA-TDSQL-5.4 | Ensure No High-Privilege Accounts Use Wildcard Hostnamestdsql · Level 1 | tdsql | High | 1 | Automated |
| TMA-TDSQL-5.5 | Ensure No Excessive `SUPER` Privilege Grantstdsql · Level 1 | tdsql | High | 1 | Manual review |
| TMA-TDSQL-5.6 | Ensure No Excessive `FILE` Privilege Grantstdsql · Level 1 | tdsql | High | 1 | Manual review |
| TMA-TDSQL-5.11 | Ensure TXSQL System User Hiding and Anti-Forgery Is Enabledtdsql · Level 1 | tdsql | High | 1 | Manual review |
| TMA-TDSQL-5.12 | Ensure the Callable Scope of OSS Sensitive Interfaces Is Restrictedtdsql · Level 1 | tdsql | High | 1 | Manual review |
| TMA-TDSQL-6.1 | Ensure TXSQL Auditing Is Enabled on All Data Nodestdsql · Level 1 | tdsql | High | 1 | Automated |
| TMA-TDSQL-7.2 | Ensure the TDSQL Password Complexity Policy Is Enabledtdsql · Level 1 | tdsql | High | 1 | Manual review |
| TMA-TDSQL-7.5 | Ensure Credentials Are Stored Encryptedtdsql · Level 1 | tdsql | High | 1 | Manual review |
| TMA-TDSQL-8.1 | Ensure KMS Is Deployed and Instance Data Encryption Is Enabledtdsql · Level 2 | tdsql | High | 2 | Manual review |
| TMA-TDSQL-8.2 | Ensure InnoDB Tablespace Encryption Is Enabled for Sensitive Tablestdsql · Level 2 | tdsql | High | 2 | Manual review |
| TMA-TDSQL-9.1 | Ensure SSL/TLS Is Enabled on MySQL Instancestdsql · Level 1 | tdsql | High | 1 | Automated |
| TMA-TDSQL-9.2 | Ensure SQLEngine-to-Data-Node Communication Is Encryptedtdsql · Level 1 | tdsql | High | 1 | Automated |
| TMA-TDSQL-9.3 | Ensure the Gateway Has SSL Enabledtdsql · Level 1 | tdsql | High | 1 | Manual review |
| TMA-TDSQL-10.1 | Ensure SSL Is Enabled on the Replication Linktdsql · Level 1 | tdsql | High | 1 | Automated |
| TMA-TDSQL-10.2 | Ensure the Replication User Has Minimal Privilegestdsql · Level 1 | tdsql | High | 1 | Automated |
| TMA-TDSQL-11.1 | Ensure ZooKeeper ACLs Are Enabledtdsql · Level 1 | tdsql | High | 1 | Automated |
| TMA-TDSQL-12.1 | Ensure OC Tool Credentials Are Changed and Use a Least-Privilege Accounttdsql · Level 1 | tdsql | High | 1 | Manual review |
| TMA-TDSQL-12.2 | Ensure Manager Database Credentials Are Encryptedtdsql · Level 1 | tdsql | High | 1 | Manual review |
| TMA-TDSQL-12.9 | Ensure Access to KMS Configuration Interfaces Is Restrictedtdsql · Level 1 | tdsql | High | 1 | Manual review |
| TMA-TDSQL-12.10 | Ensure OSS Interface Signature Authentication Is Hardenedtdsql · Level 1 | tdsql | High | 1 | Manual review |
| TMA-TDSQL-1.1 | Ensure the TDSQL Database Is Placed on a Non-System Partitiontdsql · Level 1 | tdsql | Medium | 1 | Automated |
| TMA-TDSQL-1.3 | Ensure Interactive Login Is Disabled for TDSQL Service Accountstdsql · Level 1 | tdsql | Medium | 1 | Automated |
| TMA-TDSQL-1.9 | Ensure Appropriate System Resource Limits Are Configuredtdsql · Level 1 | tdsql | Medium | 1 | Automated |
| TMA-TDSQL-2.1 | Ensure Dedicated Hosts Are Used for TDSQL Componentstdsql · Level 1 | tdsql | Medium | 1 | Manual review |
| TMA-TDSQL-2.5 | Ensure Backup Recovery Is Tested Regularlytdsql · Level 2 | tdsql | Medium | 2 | Manual review |