Rule explorer
Browse every hardening rule in the catalog. Filter by platform, severity, profile level and whether the check can be automated.
54 rules foundof 11,219Page 2 of 3
| ID | Title | Platform | Severity | Level | Check |
|---|---|---|---|---|---|
| TMA-YUGABYTEDB-3.1.18 | Ensure 'log_disconnections' is enabledyugabytedb · Level 1 | yugabytedb | Medium | 1 | Automated |
| TMA-YUGABYTEDB-3.1.21 | Ensure 'log_line_prefix' is set correctlyyugabytedb · Level 1 | yugabytedb | Medium | 1 | Automated |
| TMA-YUGABYTEDB-3.1.22 | Ensure 'log_statement' is set correctlyyugabytedb · Level 1 | yugabytedb | Medium | 1 | Automated |
| TMA-YUGABYTEDB-3.3 | Ensure that auditing is enabled for YCQLyugabytedb · Level 2 | yugabytedb | Medium | 2 | Automated |
| TMA-YUGABYTEDB-4.1 | Ensure sudo is configured correctlyyugabytedb · Level 1 | yugabytedb | Medium | 1 | Manual review |
| TMA-YUGABYTEDB-4.3 | Ensure excessive function privileges are revokedyugabytedb · Level 1 | yugabytedb | Medium | 1 | Manual review |
| TMA-YUGABYTEDB-4.4 | Ensure excessive DML privileges are revokedyugabytedb · Level 1 | yugabytedb | Medium | 1 | Manual review |
| TMA-YUGABYTEDB-4.5 | Ensure Row Level Security (RLS) is configured correctlyyugabytedb · Level 1 | yugabytedb | Medium | 1 | Manual review |
| TMA-YUGABYTEDB-5.4 | Ensure there are no unnecessary roles or excessive privilegesyugabytedb · Level 2 | yugabytedb | Medium | 2 | Manual review |
| TMA-YUGABYTEDB-5.5 | Ensure that YCQL only listens for network connections on authorized interfacesyugabytedb · Level 2 | yugabytedb | Medium | 2 | Manual review |
| TMA-YUGABYTEDB-6.1 | Ensure login via "local" UNIX Domain Socket is configured correctlyyugabytedb · Level 1 | yugabytedb | Medium | 1 | Manual review |
| TMA-YUGABYTEDB-7.1 | Ensure security-relevant runtime GFlags are configured correctlyyugabytedb · Level 1 | yugabytedb | Medium | 1 | Manual review |
| TMA-YUGABYTEDB-7.4 | Ensure the pgcrypto extension is installed and configured correctlyyugabytedb · Level 1 | yugabytedb | Medium | 1 | Manual review |
| TMA-YUGABYTEDB-1.2 | Ensure systemd Service Files Are Enabledyugabytedb · Level 1 | yugabytedb | Low | 1 | Manual review |
| TMA-YUGABYTEDB-3.1.2 | Ensure the filename pattern for log files is set correctlyyugabytedb · Level 1 | yugabytedb | Low | 1 | Manual review |
| TMA-YUGABYTEDB-3.1.4 | Ensure 'log_truncate_on_rotation' is enabledyugabytedb · Level 1 | yugabytedb | Low | 1 | Automated |
| TMA-YUGABYTEDB-3.1.5 | Ensure the maximum log file lifetime is set correctlyyugabytedb · Level 1 | yugabytedb | Low | 1 | Automated |
| TMA-YUGABYTEDB-3.1.6 | Ensure the maximum log file size is set correctlyyugabytedb · Level 1 | yugabytedb | Low | 1 | Automated |
| TMA-YUGABYTEDB-3.1.7 | Ensure the correct syslog facility is selectedyugabytedb · Level 1 | yugabytedb | Low | 1 | Manual review |
| TMA-YUGABYTEDB-3.1.8 | Ensure syslog messages are not suppressedyugabytedb · Level 1 | yugabytedb | Low | 1 | Manual review |
| TMA-YUGABYTEDB-3.1.9 | Ensure syslog messages are not lost due to sizeyugabytedb · Level 1 | yugabytedb | Low | 1 | Manual review |
| TMA-YUGABYTEDB-3.1.10 | Ensure the program name for YugabyteDB syslog messages is correctyugabytedb · Level 1 | yugabytedb | Low | 1 | Manual review |
| TMA-YUGABYTEDB-3.1.13 | Ensure 'debug_print_parse' is disabledyugabytedb · Level 1 | yugabytedb | Low | 1 | Automated |
| TMA-YUGABYTEDB-3.1.14 | Ensure 'debug_print_rewritten' is disabledyugabytedb · Level 1 | yugabytedb | Low | 1 | Automated |
| TMA-YUGABYTEDB-3.1.15 | Ensure 'debug_print_plan' is disabledyugabytedb · Level 1 | yugabytedb | Low | 1 | Automated |