Rule explorer
Browse every hardening rule in the catalog. Filter by platform, severity, profile level and whether the check can be automated.
78 rules foundof 11,219Page 1 of 4
| ID | Title | Platform | Severity | Level | Check |
|---|---|---|---|---|---|
| TMA-DB2-ZOS-1.2.2 | Ensure that authorization is enableddb2-zos · Level 1 | db2-zos | High | 1 | Manual review |
| TMA-DB2-ZOS-1.2.3 | Ensure that the default authorization IDs are changed from the installation defineddb2-zos · Level 1 | db2-zos | High | 1 | Manual review |
| TMA-DB2-ZOS-1.2.5 | Separate security administration from system administrationdb2-zos · Level 1 | db2-zos | High | 1 | Manual review |
| TMA-DB2-ZOS-2.1.2 | Ensure secure authentication is enabled for remote accessdb2-zos · Level 1 | db2-zos | High | 1 | Manual review |
| TMA-DB2-ZOS-2.1.3 | Secure access by using Multi-Factor Authentication (MFA)db2-zos · Level 1 | db2-zos | High | 1 | Manual review |
| TMA-DB2-ZOS-2.1.4 | Secure all remote connections by using SSLdb2-zos · Level 1 | db2-zos | High | 1 | Manual review |
| TMA-DB2-ZOS-2.1.9 | Ensure that grant authorization IDs are defined in RACFdb2-zos · Level 1 | db2-zos | High | 1 | Manual review |
| TMA-DB2-ZOS-2.3.1 | Ensure that access to the program authorization table is restricteddb2-zos · Level 1 | db2-zos | High | 1 | Manual review |
| TMA-DB2-ZOS-2.5.1 | Ensure that data is encrypted at rest and in-flightdb2-zos · Level 1 | db2-zos | High | 1 | Manual review |
| TMA-DB2-ZOS-3.1.3 | Ensure that authorization failures are auditeddb2-zos · Level 1 | db2-zos | High | 1 | Manual review |
| TMA-DB2-ZOS-3.1.4 | Enable audit policies to audit installation system administrator and system operator accessdb2-zos · Level 1 | db2-zos | High | 1 | Manual review |
| TMA-DB2-ZOS-3.1.5 | Enable auditing of system administrator accessdb2-zos · Level 1 | db2-zos | High | 1 | Manual review |
| TMA-DB2-ZOS-3.1.6 | Enable auditing of database administrator accessdb2-zos · Level 1 | db2-zos | High | 1 | Manual review |
| TMA-DB2-ZOS-1.1.1 | Ensure that Db2 system data sets are protecteddb2-zos · Level 1 | db2-zos | Medium | 1 | Manual review |
| TMA-DB2-ZOS-1.1.2 | Ensure that Db2 USS file system is protecteddb2-zos · Level 1 | db2-zos | Medium | 1 | Manual review |
| TMA-DB2-ZOS-1.1.3 | Secure installation processdb2-zos · Level 1 | db2-zos | Medium | 1 | Manual review |
| TMA-DB2-ZOS-1.2.1 | Ensure that RACF changes are accepted immediatelydb2-zos · Level 1 | db2-zos | Medium | 1 | Manual review |
| TMA-DB2-ZOS-1.2.4 | Ensure that generic error codes are returned for remote security errorsdb2-zos · Level 1 | db2-zos | Medium | 1 | Manual review |
| TMA-DB2-ZOS-2.1.1 | Ensure subsystem access is protecteddb2-zos · Level 1 | db2-zos | Medium | 1 | Manual review |
| TMA-DB2-ZOS-2.1.5 | Secure remote connections by using TCP/IP Network Access control with the RACF SERVAUTH classdb2-zos · Level 1 | db2-zos | Medium | 1 | Manual review |
| TMA-DB2-ZOS-2.1.6 | Secure connections by using trusted contextsdb2-zos · Level 1 | db2-zos | Medium | 1 | Manual review |
| TMA-DB2-ZOS-2.1.7 | Secure object ownership by using Db2 rolesdb2-zos · Level 1 | db2-zos | Medium | 1 | Manual review |
| TMA-DB2-ZOS-2.1.8 | Secure application access by using package controlsdb2-zos · Level 1 | db2-zos | Medium | 1 | Manual review |
| TMA-DB2-ZOS-2.2.1 | Ensure that access to the catalog tables in the communications database (CDB) is restricteddb2-zos · Level 1 | db2-zos | Medium | 1 | Manual review |
| TMA-DB2-ZOS-2.2.2 | Ensure that access to SYSIBM.SYSAUDITPOLICIES is restricteddb2-zos · Level 1 | db2-zos | Medium | 1 | Manual review |