Rule explorer
Browse every hardening rule in the catalog. Filter by platform, severity, profile level and whether the check can be automated.
86 rules foundof 16,927Page 1 of 4
| ID | Title | Platform | Severity | Level | Check |
|---|---|---|---|---|---|
| TMA-APACHE-3.1 | Ensure the Apache Web Server Runs As a Non-Root Userapache · Level 1 | apache | High | 1 | Automated |
| TMA-APACHE-3.4 | Ensure Apache Directories and Files Are Owned By Rootapache · Level 1 | apache | High | 1 | Automated |
| TMA-APACHE-3.6 | Ensure Other Write Access on Apache Directories and Files Is Restrictedapache · Level 1 | apache | High | 1 | Automated |
| TMA-APACHE-4.1 | Ensure Access to OS Root Directory Is Denied By Defaultapache · Level 1 | apache | High | 1 | Automated |
| TMA-APACHE-7.1 | Ensure mod_ssl and/or mod_nss Is Installedapache · Level 1 | apache | High | 1 | Automated |
| TMA-APACHE-7.3 | Ensure the Server's Private Key Is Protectedapache · Level 1 | apache | High | 1 | Automated |
| TMA-APACHE-7.4 | Ensure the TLSv1.0 and TLSv1.1 Protocols are Disabledapache · Level 1 | apache | High | 1 | Automated |
| TMA-APACHE-7.5 | Ensure Weak SSL/TLS Ciphers Are Disabledapache · Level 1 | apache | High | 1 | Automated |
| TMA-APACHE-7.6 | Ensure Insecure SSL Renegotiation Is Not Enabledapache · Level 1 | apache | High | 1 | Automated |
| TMA-APACHE-1.1 | Ensure the Pre-Installation Planning Checklist Has Been Implementedapache · Level 1 | apache | Medium | 1 | Manual review |
| TMA-APACHE-1.2 | Ensure the Server Is Not a Multi-Use Systemapache · Level 1 | apache | Medium | 1 | Manual review |
| TMA-APACHE-1.3 | Ensure Apache Is Installed From the Appropriate Binariesapache · Level 1 | apache | Medium | 1 | Manual review |
| TMA-APACHE-2.1 | Ensure Only Necessary Authentication and Authorization Modules Are Enabledapache · Level 1 | apache | Medium | 1 | Manual review |
| TMA-APACHE-2.2 | Ensure the Log Config Module Is Enabledapache · Level 1 | apache | Medium | 1 | Automated |
| TMA-APACHE-2.3 | Ensure the WebDAV Modules Are Disabledapache · Level 1 | apache | Medium | 1 | Automated |
| TMA-APACHE-2.5 | Ensure the Autoindex Module Is Disabledapache · Level 1 | apache | Medium | 1 | Automated |
| TMA-APACHE-2.6 | Ensure the Proxy Modules Are Disabled if not in useapache · Level 1 | apache | Medium | 1 | Automated |
| TMA-APACHE-2.7 | Ensure the User Directories Module Is Disabledapache · Level 1 | apache | Medium | 1 | Automated |
| TMA-APACHE-3.2 | Ensure the Apache User Account Has an Invalid Shellapache · Level 1 | apache | Medium | 1 | Automated |
| TMA-APACHE-3.3 | Ensure the Apache User Account Is Lockedapache · Level 1 | apache | Medium | 1 | Automated |
| TMA-APACHE-3.5 | Ensure the Group Is Set Correctly on Apache Directories and Filesapache · Level 1 | apache | Medium | 1 | Automated |
| TMA-APACHE-3.7 | Ensure the Core Dump Directory Is Securedapache · Level 1 | apache | Medium | 1 | Manual review |
| TMA-APACHE-3.8 | Ensure the Lock File Is Securedapache · Level 1 | apache | Medium | 1 | Manual review |
| TMA-APACHE-3.9 | Ensure the Pid File Is Securedapache · Level 1 | apache | Medium | 1 | Manual review |
| TMA-APACHE-3.10 | Ensure the ScoreBoard File Is Securedapache · Level 1 | apache | Medium | 1 | Manual review |