Rule explorer
Browse every hardening rule in the catalog. Filter by platform, severity, profile level and whether the check can be automated.
16,927 rules foundPage 358 of 678
| ID | Title | Platform | Severity | Level | Check |
|---|---|---|---|---|---|
| TMA-ROCKY10-5.2.2 | Ensure sudo commands use ptylinux · Level 1 | linux | Medium | 1 | Automated |
| TMA-ROCKY10-5.3.2.2.6 | Ensure password dictionary check is enabledlinux · Level 1 | linux | Medium | 1 | Automated |
| TMA-ROCKY10-5.3.2.3.2 | Ensure password history is enforced for the root userlinux · Level 1 | linux | Medium | 1 | Automated |
| TMA-ROCKY10-5.4.1.6 | Ensure all users last password change date is in the pastlinux · Level 1 | linux | Medium | 1 | Automated |
| TMA-ROCKY10-5.4.2.1 | Ensure root is the only UID 0 accountlinux · Level 1 | linux | Medium | 1 | Automated |
| TMA-ROCKY10-5.4.2.3 | Ensure group root is the only GID 0 grouplinux · Level 1 | linux | Medium | 1 | Automated |
| TMA-ROCKY10-5.4.2.5 | Ensure root path integritylinux · Level 1 | linux | Medium | 1 | Automated |
| TMA-ROCKY10-5.4.2.6 | Ensure root user umask is configuredlinux · Level 1 | linux | Medium | 1 | Automated |
| TMA-ROCKY10-5.4.2.8 | Ensure accounts without a valid login shell are lockedlinux · Level 1 | linux | Medium | 1 | Automated |
| TMA-ROCKY10-5.4.3.2 | Ensure default user shell timeout is configuredlinux · Level 1 | linux | Medium | 1 | Automated |
| TMA-ROCKY10-6.1.3 | Ensure cryptographic mechanisms are used to protect the integrity of audit toolslinux · Level 1 | linux | Medium | 1 | Automated |
| TMA-ROCKY10-6.2.1.1 | Ensure journald service is activelinux · Level 1 | linux | Medium | 1 | Automated |
| TMA-ROCKY10-6.2.1.4 | Ensure only one logging system is in uselinux · Level 1 | linux | Medium | 1 | Automated |
| TMA-ROCKY10-6.2.2.1.3 | Ensure systemd-journal-upload is enabled and activelinux · Level 1 | linux | Medium | 1 | Automated |
| TMA-ROCKY10-6.2.3.2 | Ensure rsyslog service is enabled and activelinux · Level 1 | linux | Medium | 1 | Automated |
| TMA-ROCKY10-6.2.3.4 | Ensure rsyslog log file creation mode is configuredlinux · Level 1 | linux | Medium | 1 | Automated |
| TMA-ROCKY10-6.2.4.1 | Ensure access to all logfiles has been configuredlinux · Level 1 | linux | Medium | 1 | Automated |
| TMA-ROCKY10-7.1.1 | Ensure access to /etc/passwd is configuredlinux · Level 1 | linux | Medium | 1 | Automated |
| TMA-ROCKY10-7.1.2 | Ensure access to /etc/passwd- is configuredlinux · Level 1 | linux | Medium | 1 | Automated |
| TMA-ROCKY10-7.1.3 | Ensure access to /etc/group is configuredlinux · Level 1 | linux | Medium | 1 | Automated |
| TMA-ROCKY10-7.1.4 | Ensure access to /etc/group- is configuredlinux · Level 1 | linux | Medium | 1 | Automated |
| TMA-ROCKY10-7.1.5 | Ensure access to /etc/shadow is configuredlinux · Level 1 | linux | Medium | 1 | Automated |
| TMA-ROCKY10-7.1.6 | Ensure access to /etc/shadow- is configuredlinux · Level 1 | linux | Medium | 1 | Automated |
| TMA-ROCKY10-7.1.7 | Ensure access to /etc/gshadow is configuredlinux · Level 1 | linux | Medium | 1 | Automated |
| TMA-ROCKY10-7.1.8 | Ensure access to /etc/gshadow- is configuredlinux · Level 1 | linux | Medium | 1 | Automated |