Rule explorer
Browse every hardening rule in the catalog. Filter by platform, severity, profile level and whether the check can be automated.
79 rules foundof 11,219Page 3 of 4
| ID | Title | Platform | Severity | Level | Check |
|---|---|---|---|---|---|
| TMA-MYSQL-4.3 | Ensure 'allow-suspicious-udfs' is Set to 'OFF'mysql · Level 2 | mysql | Medium | 2 | Automated |
| TMA-MYSQL-4.4 | Harden Usage for 'local_infile' on MySQL Clientsmysql · Level 1 | mysql | Medium | 1 | Automated |
| TMA-MYSQL-4.6 | Ensure Symbolic Links are Disabledmysql · Level 1 | mysql | Medium | 1 | Automated |
| TMA-MYSQL-4.7 | Ensure the 'secure_file_priv' is Configured Correctlymysql · Level 1 | mysql | Medium | 1 | Automated |
| TMA-MYSQL-4.9 | Use MySQL TDE for At-Rest Data Encryptionmysql · Level 2 | mysql | Medium | 2 | Automated |
| TMA-MYSQL-5.3 | Ensure 'PROCESS' is Not Granted to Non-Administrative Usersmysql · Level 2 | mysql | Medium | 2 | Manual review |
| TMA-MYSQL-5.5 | Ensure 'SHUTDOWN' is Not Granted to Non-Administrative Usersmysql · Level 1 | mysql | Medium | 1 | Manual review |
| TMA-MYSQL-5.8 | Ensure 'REPLICATION SLAVE' is Not Granted to Non-Administrative Usersmysql · Level 1 | mysql | Medium | 1 | Manual review |
| TMA-MYSQL-5.9 | Ensure DML/DDL Grants are Limited to Specific Databases and Usersmysql · Level 1 | mysql | Medium | 1 | Manual review |
| TMA-MYSQL-5.10 | Securely Define Stored Procedures and Functions DEFINER and INVOKERmysql · Level 1 | mysql | Medium | 1 | Manual review |
| TMA-MYSQL-5.11 | Ensure Proper Use Of 'SET_ANY_DEFINER'mysql · Level 1 | mysql | Medium | 1 | Manual review |
| TMA-MYSQL-5.12 | Ensure Proper Use Of ALLOW_NONEXISTENT_DEFINERmysql · Level 1 | mysql | Medium | 1 | Manual review |
| TMA-MYSQL-6.1 | Ensure 'log_error' is configured correctlymysql · Level 1 | mysql | Medium | 1 | Automated |
| TMA-MYSQL-7.4 | Set 'default_password_lifetime' to Require a Yearly Password Changemysql · Level 1 | mysql | Medium | 1 | Automated |
| TMA-MYSQL-7.6 | Ensure No Users Have Wildcard Hostnamesmysql · Level 1 | mysql | Medium | 1 | Automated |
| TMA-MYSQL-10.2 | Allowlist Approved Servers Belonging to a MySQL InnoDB Clustermysql · Level 2 | mysql | Medium | 2 | Manual review |
| TMA-MYSQL-1.1 | Place Databases on Non-System Partitionsmysql · Level 1 | mysql | Low | 1 | Manual review |
| TMA-MYSQL-1.3 | Disable MySQL Command Historymysql · Level 2 | mysql | Low | 2 | Automated |
| TMA-MYSQL-1.7 | Ensure MySQL is Run Under a Sandbox Environmentmysql · Level 2 | mysql | Low | 2 | Manual review |
| TMA-MYSQL-2.1.6 | Backup of Configuration and Related Filesmysql · Level 1 | mysql | Low | 1 | Manual review |
| TMA-MYSQL-2.3 | Dedicate the Machine Running MySQLmysql · Level 1 | mysql | Low | 1 | Manual review |
| TMA-MYSQL-2.5 | Do Not Reuse Usernamesmysql · Level 1 | mysql | Low | 1 | Manual review |
| TMA-MYSQL-2.9 | Require Current Password for Password Resetmysql · Level 2 | mysql | Low | 2 | Automated |
| TMA-MYSQL-2.10 | Use Dual Passwords to Enable Higher Frequency Password Rotationmysql · Level 2 | mysql | Low | 2 | Manual review |
| TMA-MYSQL-2.12 | Ensure AES Encryption Mode for AES_ENCRYPT/AES_DECRYPT is Configured Correctlymysql · Level 2 | mysql | Low | 2 | Automated |