Rule explorer
Browse every hardening rule in the catalog. Filter by platform, severity, profile level and whether the check can be automated.
119 rules foundof 8,597Page 1 of 5
| ID | Title | Platform | Severity | Level | Check |
|---|---|---|---|---|---|
| TMA-COS-5.2.2 | Ensure password reuse is limitedcos · Level 2 | cos | High | 2 | Automated |
| TMA-COS-5.2.3 | Ensure password hashing algorithm is SHA-512cos · Level 2 | cos | High | 2 | Automated |
| TMA-COS-5.3.1.1 | Ensure password expiration is 365 days or lesscos · Level 2 | cos | High | 2 | Automated |
| TMA-COS-5.3.1.3 | Ensure password expiration warning days is 7 or morecos · Level 1 | cos | High | 1 | Automated |
| TMA-COS-5.3.1.4 | Ensure inactive password lock is 30 days or lesscos · Level 2 | cos | High | 2 | Automated |
| TMA-COS-5.3.1.5 | Ensure all users last password change date is in the pastcos · Level 1 | cos | High | 1 | Automated |
| TMA-COS-5.4 | Ensure root login is restricted to system consolecos · Level 1 | cos | High | 1 | Manual review |
| TMA-COS-1.1.2 | Ensure /tmp is configuredcos · Level 1 | cos | Medium | 1 | Automated |
| TMA-COS-1.1.3 | Ensure nodev option set on /tmp partitioncos · Level 1 | cos | Medium | 1 | Automated |
| TMA-COS-1.1.4 | Ensure nosuid option set on /tmp partitioncos · Level 1 | cos | Medium | 1 | Automated |
| TMA-COS-1.1.5 | Ensure noexec option set on /tmp partitioncos · Level 1 | cos | Medium | 1 | Automated |
| TMA-COS-1.1.9 | Ensure nodev option set on /home partitioncos · Level 1 | cos | Medium | 1 | Automated |
| TMA-COS-1.1.10 | Ensure nodev option set on /dev/shm partitioncos · Level 1 | cos | Medium | 1 | Automated |
| TMA-COS-1.1.11 | Ensure nosuid option set on /dev/shm partitioncos · Level 1 | cos | Medium | 1 | Automated |
| TMA-COS-1.1.12 | Ensure noexec option set on /dev/shm partitioncos · Level 1 | cos | Medium | 1 | Automated |
| TMA-COS-1.1.13 | Disable Automountingcos · Level 1 | cos | Medium | 1 | Automated |
| TMA-COS-1.2.1 | Ensure dm-verity is enabledcos · Level 1 | cos | Medium | 1 | Automated |
| TMA-COS-1.3.1 | Ensure authentication required for single user modecos · Level 1 | cos | Medium | 1 | Automated |
| TMA-COS-1.4.2 | Ensure XD/NX support is enabledcos · Level 1 | cos | Medium | 1 | Manual review |
| TMA-COS-1.4.3 | Ensure address space layout randomization (ASLR) is enabledcos · Level 1 | cos | Medium | 1 | Automated |
| TMA-COS-1.5.1.2 | Ensure local login warning banner is configured properlycos · Level 1 | cos | Medium | 1 | Automated |
| TMA-COS-1.5.1.3 | Ensure remote login warning banner is configured properlycos · Level 1 | cos | Medium | 1 | Automated |
| TMA-COS-1.5.1.5 | Ensure permissions on /etc/issue are configuredcos · Level 1 | cos | Medium | 1 | Automated |
| TMA-COS-1.6 | Ensure AppArmor is installedcos · Level 1 | cos | Medium | 1 | Manual review |
| TMA-COS-2.1.1.1 | Ensure time synchronization is in usecos · Level 1 | cos | Medium | 1 | Manual review |