Rule explorer
Browse every hardening rule in the catalog. Filter by platform, severity, profile level and whether the check can be automated.
119 rules foundof 11,219Page 3 of 5
| ID | Title | Platform | Severity | Level | Check |
|---|---|---|---|---|---|
| TMA-COS-5.1.21 | Ensure SSH MaxStartups is configuredcos · Level 2 | cos | Medium | 2 | Manual review |
| TMA-COS-5.3.2 | Ensure system accounts are securedcos · Level 2 | cos | Medium | 2 | Automated |
| TMA-COS-5.3.3 | Ensure default group for the root account is GID 0cos · Level 1 | cos | Medium | 1 | Automated |
| TMA-COS-5.3.4 | Ensure default user umask is 027 or more restrictivecos · Level 2 | cos | Medium | 2 | Automated |
| TMA-COS-5.5 | Ensure access to the su command is restrictedcos · Level 1 | cos | Medium | 1 | Manual review |
| TMA-COS-6.1.1 | Ensure permissions on /etc/passwd are configuredcos · Level 1 | cos | Medium | 1 | Automated |
| TMA-COS-6.1.2 | Ensure permissions on /etc/shadow are configuredcos · Level 1 | cos | Medium | 1 | Manual review |
| TMA-COS-6.1.3 | Ensure permissions on /etc/group are configuredcos · Level 1 | cos | Medium | 1 | Automated |
| TMA-COS-6.1.4 | Ensure permissions on /etc/gshadow are configuredcos · Level 1 | cos | Medium | 1 | Manual review |
| TMA-COS-6.1.7 | Ensure permissions on /etc/group- are configuredcos · Level 1 | cos | Medium | 1 | Manual review |
| TMA-COS-6.2.1 | Ensure password fields are not emptycos · Level 1 | cos | Medium | 1 | Manual review |
| TMA-COS-6.2.2 | Ensure no legacy "+" entries exist in /etc/passwdcos · Level 1 | cos | Medium | 1 | Manual review |
| TMA-COS-6.2.3 | Ensure no legacy "+" entries exist in /etc/shadowcos · Level 1 | cos | Medium | 1 | Manual review |
| TMA-COS-6.2.4 | Ensure no legacy "+" entries exist in /etc/groupcos · Level 1 | cos | Medium | 1 | Manual review |
| TMA-COS-6.2.5 | Ensure root is the only UID 0 accountcos · Level 1 | cos | Medium | 1 | Automated |
| TMA-COS-6.2.6 | Ensure root PATH Integritycos · Level 2 | cos | Medium | 2 | Manual review |
| TMA-COS-6.2.15 | Ensure all groups in /etc/passwd exist in /etc/groupcos · Level 2 | cos | Medium | 2 | Automated |
| TMA-COS-6.2.16 | Ensure no duplicate UIDs existcos · Level 1 | cos | Medium | 1 | Automated |
| TMA-COS-6.2.17 | Ensure no duplicate GIDs existcos · Level 1 | cos | Medium | 1 | Automated |
| TMA-COS-6.2.18 | Ensure no duplicate user names existcos · Level 1 | cos | Medium | 1 | Automated |
| TMA-COS-6.2.19 | Ensure no duplicate group names existcos · Level 1 | cos | Medium | 1 | Automated |
| TMA-COS-6.2.20 | Ensure shadow group is emptycos · Level 1 | cos | Medium | 1 | Manual review |
| TMA-COS-1.1.1.1 | Ensure mounting of udf filesystems is disabledcos · Level 2 | cos | Low | 2 | Manual review |
| TMA-COS-1.1.6 | Ensure nosuid option set on /var partitioncos · Level 2 | cos | Low | 2 | Automated |
| TMA-COS-1.1.7 | Ensure noexec option set on /var partitioncos · Level 2 | cos | Low | 2 | Automated |