Rule explorer
Browse every hardening rule in the catalog. Filter by platform, severity, profile level and whether the check can be automated.
106 rules foundof 16,927Page 3 of 5
| ID | Title | Platform | Severity | Level | Check |
|---|---|---|---|---|---|
| TMA-TDSQL-2.10 | Ensure TDSQL Component Versions Are Consistent Across the Clustertdsql · Level 1 | tdsql | Medium | 1 | Manual review |
| TMA-TDSQL-2.11 | Ensure Adequate Disk Space Monitoring Is Configuredtdsql · Level 1 | tdsql | Medium | 1 | Manual review |
| TMA-TDSQL-3.2 | Ensure Correct Permissions on TDSQL Log Directoriestdsql · Level 1 | tdsql | Medium | 1 | Automated |
| TMA-TDSQL-3.10 | Ensure Correct Permissions on MySQL Slow Query Log Filestdsql · Level 1 | tdsql | Medium | 1 | Automated |
| TMA-TDSQL-3.11 | Ensure Correct Permissions on MySQL Error Log Filestdsql · Level 1 | tdsql | Medium | 1 | Automated |
| TMA-TDSQL-3.13 | Ensure Build and Deployment Artifacts Are Removed from Productiontdsql · Level 1 | tdsql | Medium | 1 | Automated |
| TMA-TDSQL-3.14 | Ensure Correct Permissions on the Temporary File Directorytdsql · Level 1 | tdsql | Medium | 1 | Automated |
| TMA-TDSQL-4.3 | Ensure `secure_file_priv` Is Correctly Configuredtdsql · Level 1 | tdsql | Medium | 1 | Automated |
| TMA-TDSQL-4.5 | Ensure Symbolic Links Are Disabledtdsql · Level 1 | tdsql | Medium | 1 | Automated |
| TMA-TDSQL-4.6 | Ensure the `daemon_memcached` Plugin Is Disabledtdsql · Level 1 | tdsql | Medium | 1 | Automated |
| TMA-TDSQL-4.7 | Ensure `default_password_lifetime` Is Reasonably Settdsql · Level 1 | tdsql | Medium | 1 | Automated |
| TMA-TDSQL-4.8 | Ensure High-Risk Parameters Cannot Be Arbitrarily Modified via `SET GLOBAL`tdsql · Level 2 | tdsql | Medium | 2 | Manual review |
| TMA-TDSQL-4.9 | Ensure Gateway-Layer Secure SQL Protection Is Enabledtdsql · Level 1 | tdsql | Medium | 1 | Manual review |
| TMA-TDSQL-4.10 | Ensure `binlog_format` Is Set to `ROW`tdsql · Level 1 | tdsql | Medium | 1 | Automated |
| TMA-TDSQL-4.11 | Ensure the TXSQL SQL Firewall Is Enabledtdsql · Level 2 | tdsql | Medium | 2 | Manual review |
| TMA-TDSQL-4.12 | Ensure Connection-Control Failed-Login Delay Is Enabledtdsql · Level 1 | tdsql | Medium | 1 | Automated |
| TMA-TDSQL-4.14 | Ensure Primary Keys Are Enforced and MyISAM Engine Is Prohibitedtdsql · Level 1 | tdsql | Medium | 1 | Automated |
| TMA-TDSQL-5.3 | Ensure System Account Privileges Are Minimizedtdsql · Level 1 | tdsql | Medium | 1 | Manual review |
| TMA-TDSQL-5.7 | Ensure No Excessive `PROCESS` Privilege Grantstdsql · Level 2 | tdsql | Medium | 2 | Manual review |
| TMA-TDSQL-5.10 | Ensure the OSS API Allowlist Is Configuredtdsql · Level 2 | tdsql | Medium | 2 | Manual review |
| TMA-TDSQL-6.4 | Ensure `log_raw` Is Disabledtdsql · Level 1 | tdsql | Medium | 1 | Automated |
| TMA-TDSQL-6.6 | Ensure OSS Management Operations Are Auditedtdsql · Level 1 | tdsql | Medium | 1 | Manual review |
| TMA-TDSQL-6.7 | Ensure a Reasonable Log Retention Policytdsql · Level 1 | tdsql | Medium | 1 | Manual review |
| TMA-TDSQL-6.8 | Ensure Centralized Audit Log Collection Is Configuredtdsql · Level 1 | tdsql | Medium | 1 | Manual review |
| TMA-TDSQL-6.9 | Ensure Audit Logs Are Written in Append Mode and Protected from Overwritetdsql · Level 1 | tdsql | Medium | 1 | Automated |