Rule explorer
Browse every hardening rule in the catalog. Filter by platform, severity, profile level and whether the check can be automated.
16,927 rules foundPage 352 of 678
| ID | Title | Platform | Severity | Level | Check |
|---|---|---|---|---|---|
| TMA-ROCKY9-5.3.3.4.1 | Ensure pam_unix does not include nulloklinux · Level 1 | linux | Medium | 1 | Automated |
| TMA-ROCKY9-5.3.3.4.2 | Ensure pam_unix does not include rememberlinux · Level 1 | linux | Medium | 1 | Automated |
| TMA-ROCKY9-5.3.3.4.3 | Ensure pam_unix includes a strong password hashing algorithmlinux · Level 1 | linux | Medium | 1 | Automated |
| TMA-ROCKY9-5.4.1.6 | Ensure all users last password change date is in the pastlinux · Level 1 | linux | Medium | 1 | Automated |
| TMA-ROCKY9-5.4.2.1 | Ensure root is the only UID 0 accountlinux · Level 1 | linux | Medium | 1 | Automated |
| TMA-ROCKY9-5.4.2.2 | Ensure root is the only GID 0 accountlinux · Level 1 | linux | Medium | 1 | Automated |
| TMA-ROCKY9-5.4.2.3 | Ensure group root is the only GID 0 grouplinux · Level 1 | linux | Medium | 1 | Automated |
| TMA-ROCKY9-5.4.2.5 | Ensure root path integritylinux · Level 1 | linux | Medium | 1 | Automated |
| TMA-ROCKY9-5.4.2.8 | Ensure accounts without a valid login shell are lockedlinux · Level 1 | linux | Medium | 1 | Automated |
| TMA-ROCKY9-5.4.3.2 | Ensure default user shell timeout is configuredlinux · Level 1 | linux | Medium | 1 | Automated |
| TMA-ROCKY9-6.1.1.1 | Ensure journald service is activelinux · Level 1 | linux | Medium | 1 | Automated |
| TMA-ROCKY9-6.1.2.4 | Ensure access to rsyslog configuration files is configuredlinux · Level 1 | linux | Medium | 1 | Automated |
| TMA-ROCKY9-6.1.2.5 | Ensure access to the /etc/rsyslog.d directory is configuredlinux · Level 1 | linux | Medium | 1 | Automated |
| TMA-ROCKY9-6.1.2.6 | Ensure access to the rsyslog work directory is configuredlinux · Level 1 | linux | Medium | 1 | Automated |
| TMA-ROCKY9-6.1.2.7 | Ensure rsyslog is not configured as a log serverlinux · Level 1 | linux | Medium | 1 | Automated |
| TMA-ROCKY9-6.3.4 | Ensure report_url is configuredlinux · Level 1 | linux | Medium | 1 | Automated |
| TMA-ROCKY9-7.1.11 | Ensure world writable files and directories are securedlinux · Level 1 | linux | Medium | 1 | Automated |
| TMA-ROCKY9-7.1.12 | Ensure no files or directories without an owner and a group existlinux · Level 1 | linux | Medium | 1 | Automated |
| TMA-ROCKY9-7.2.3 | Ensure all groups in /etc/passwd exist in /etc/grouplinux · Level 1 | linux | Medium | 1 | Automated |
| TMA-ROCKY9-7.2.4 | Ensure no duplicate UIDs existlinux · Level 1 | linux | Medium | 1 | Automated |
| TMA-ROCKY9-7.2.5 | Ensure no duplicate GIDs existlinux · Level 1 | linux | Medium | 1 | Automated |
| TMA-ROCKY9-7.2.6 | Ensure no duplicate user names existlinux · Level 1 | linux | Medium | 1 | Automated |
| TMA-ROCKY9-7.2.7 | Ensure no duplicate group names existlinux · Level 1 | linux | Medium | 1 | Automated |
| TMA-ROCKY9-7.2.8 | Ensure local interactive user home directories are configuredlinux · Level 1 | linux | Medium | 1 | Automated |
| TMA-ROCKY10-1.1.1.1 | Ensure cramfs kernel module is not availablelinux · Level 1 | linux | Medium | 1 | Automated |