Rule explorer
Browse every hardening rule in the catalog. Filter by platform, severity, profile level and whether the check can be automated.
16,927 rules foundPage 339 of 678
| ID | Title | Platform | Severity | Level | Check |
|---|---|---|---|---|---|
| TMA-RHEL10-5.1.6 | Ensure sshd Ciphers are configuredlinux · Level 1 | linux | Medium | 1 | Automated |
| TMA-RHEL10-5.1.8 | Ensure sshd DisableForwarding is enabledlinux · Level 1 | linux | Medium | 1 | Automated |
| TMA-RHEL10-5.1.9 | Ensure sshd GSSAPIAuthentication is disabledlinux · Level 1 | linux | Medium | 1 | Automated |
| TMA-RHEL10-5.1.10 | Ensure sshd HostbasedAuthentication is disabledlinux · Level 1 | linux | Medium | 1 | Automated |
| TMA-RHEL10-5.1.11 | Ensure sshd IgnoreRhosts is enabledlinux · Level 1 | linux | Medium | 1 | Automated |
| TMA-RHEL10-5.1.12 | Ensure sshd KexAlgorithms is configuredlinux · Level 1 | linux | Medium | 1 | Automated |
| TMA-RHEL10-5.1.13 | Ensure sshd LoginGraceTime is configuredlinux · Level 1 | linux | Medium | 1 | Automated |
| TMA-RHEL10-5.1.15 | Ensure sshd MACs are configuredlinux · Level 1 | linux | Medium | 1 | Automated |
| TMA-RHEL10-5.1.17 | Ensure sshd MaxStartups is configuredlinux · Level 1 | linux | Medium | 1 | Automated |
| TMA-RHEL10-5.1.19 | Ensure sshd PermitEmptyPasswords is disabledlinux · Level 1 | linux | Medium | 1 | Automated |
| TMA-RHEL10-5.1.20 | Ensure sshd PermitRootLogin is disabledlinux · Level 1 | linux | Medium | 1 | Automated |
| TMA-RHEL10-5.1.21 | Ensure sshd PermitUserEnvironment is disabledlinux · Level 1 | linux | Medium | 1 | Automated |
| TMA-RHEL10-5.1.22 | Ensure sshd UsePAM is enabledlinux · Level 1 | linux | Medium | 1 | Automated |
| TMA-RHEL10-5.2.2 | Ensure sudo commands use ptylinux · Level 1 | linux | Medium | 1 | Automated |
| TMA-RHEL10-5.3.2.2.6 | Ensure password dictionary check is enabledlinux · Level 1 | linux | Medium | 1 | Automated |
| TMA-RHEL10-5.3.2.3.2 | Ensure password history is enforced for the root userlinux · Level 1 | linux | Medium | 1 | Automated |
| TMA-RHEL10-5.4.1.6 | Ensure all users last password change date is in the pastlinux · Level 1 | linux | Medium | 1 | Automated |
| TMA-RHEL10-5.4.2.1 | Ensure root is the only UID 0 accountlinux · Level 1 | linux | Medium | 1 | Automated |
| TMA-RHEL10-5.4.2.3 | Ensure group root is the only GID 0 grouplinux · Level 1 | linux | Medium | 1 | Automated |
| TMA-RHEL10-5.4.2.5 | Ensure root path integritylinux · Level 1 | linux | Medium | 1 | Automated |
| TMA-RHEL10-5.4.2.6 | Ensure root user umask is configuredlinux · Level 1 | linux | Medium | 1 | Automated |
| TMA-RHEL10-5.4.2.8 | Ensure accounts without a valid login shell are lockedlinux · Level 1 | linux | Medium | 1 | Automated |
| TMA-RHEL10-5.4.3.2 | Ensure default user shell timeout is configuredlinux · Level 1 | linux | Medium | 1 | Automated |
| TMA-RHEL10-6.1.3 | Ensure cryptographic mechanisms are used to protect the integrity of audit toolslinux · Level 1 | linux | Medium | 1 | Automated |
| TMA-RHEL10-6.2.1.1 | Ensure journald service is activelinux · Level 1 | linux | Medium | 1 | Automated |