Rule explorer
Browse every hardening rule in the catalog. Filter by platform, severity, profile level and whether the check can be automated.
119 rules foundof 16,927Page 3 of 5
| ID | Title | Platform | Severity | Level | Check |
|---|---|---|---|---|---|
| TMA-DOCKER-1.1.14 | Ensure auditing is configured for Docker files and directories - /usr/bin/containerddocker · Level 2 | docker | Medium | 2 | Automated |
| TMA-DOCKER-1.1.15 | Ensure auditing is configured for Docker files and directories - /usr/bin/containerd-shimdocker · Level 2 | docker | Medium | 2 | Automated |
| TMA-DOCKER-1.1.16 | Ensure auditing is configured for Docker files and directories - /usr/bin/containerd-shim-runc-v1docker · Level 2 | docker | Medium | 2 | Automated |
| TMA-DOCKER-1.1.17 | Ensure auditing is configured for Docker files and directories - /usr/bin/containerd-shim-runc-v2docker · Level 2 | docker | Medium | 2 | Automated |
| TMA-DOCKER-1.1.18 | Ensure auditing is configured for Docker files and directories - /usr/bin/runcdocker · Level 2 | docker | Medium | 2 | Automated |
| TMA-DOCKER-1.2.1 | Ensure the container host has been Hardeneddocker · Level 1 | docker | Medium | 1 | Manual review |
| TMA-DOCKER-1.2.2 | Ensure that the version of Docker is up to datedocker · Level 1 | docker | Medium | 1 | Manual review |
| TMA-DOCKER-2.2 | Ensure network traffic is restricted between containers on the default bridgedocker · Level 1 | docker | Medium | 1 | Automated |
| TMA-DOCKER-2.4 | Ensure Docker is allowed to make changes to iptablesdocker · Level 1 | docker | Medium | 1 | Automated |
| TMA-DOCKER-2.6 | Ensure aufs storage driver is not useddocker · Level 1 | docker | Medium | 1 | Automated |
| TMA-DOCKER-2.7 | Ensure devicemapper storage driver is not useddocker · Level 1 | docker | Medium | 1 | Automated |
| TMA-DOCKER-2.9 | Ensure the default ulimit is configured appropriatelydocker · Level 1 | docker | Medium | 1 | Manual review |
| TMA-DOCKER-2.10 | Enable user namespace supportdocker · Level 2 | docker | Medium | 2 | Automated |
| TMA-DOCKER-2.11 | Ensure the default cgroup usage has been confirmeddocker · Level 2 | docker | Medium | 2 | Manual review |
| TMA-DOCKER-2.13 | Ensure that authorization for Docker client commands is enableddocker · Level 2 | docker | Medium | 2 | Automated |
| TMA-DOCKER-2.14 | Ensure centralized and remote logging is configureddocker · Level 2 | docker | Medium | 2 | Automated |
| TMA-DOCKER-2.16 | Ensure live restore is enabled for the Docker daemondocker · Level 2 | docker | Medium | 2 | Automated |
| TMA-DOCKER-2.18 | Ensure that a daemon-wide custom seccomp profile is applied if appropriatedocker · Level 2 | docker | Medium | 2 | Manual review |
| TMA-DOCKER-2.19 | Ensure that experimental features are not implemented in productiondocker · Level 1 | docker | Medium | 1 | Automated |
| TMA-DOCKER-3.17 | Ensure that the daemon.json file ownership is set to root:rootdocker · Level 2 | docker | Medium | 2 | Automated |
| TMA-DOCKER-3.18 | Ensure that daemon.json file permissions are set to 644 or more restrictivedocker · Level 2 | docker | Medium | 2 | Automated |
| TMA-DOCKER-3.19 | Ensure that the /etc/default/docker file ownership is set to root:rootdocker · Level 2 | docker | Medium | 2 | Automated |
| TMA-DOCKER-3.20 | Ensure that the /etc/default/docker file permissions are set to 644 or more restrictivelydocker · Level 2 | docker | Medium | 2 | Automated |
| TMA-DOCKER-3.21 | Ensure that the /etc/sysconfig/docker file permissions are set to 644 or more restrictivelydocker · Level 2 | docker | Medium | 2 | Automated |
| TMA-DOCKER-3.22 | Ensure that the /etc/sysconfig/docker file ownership is set to root:rootdocker · Level 2 | docker | Medium | 2 | Automated |