Rule explorer
Browse every hardening rule in the catalog. Filter by platform, severity, profile level and whether the check can be automated.
148 rules foundof 8,597Page 1 of 6
| ID | Title | Platform | Severity | Level | Check |
|---|---|---|---|---|---|
| TMA-FREEBSD-4.2.18 | Ensure sshd PermitEmptyPasswords is disabledfreebsd · Level 1 | freebsd | Critical | 1 | Automated |
| TMA-FREEBSD-6.2.2 | Ensure /etc/master.passwd password fields are not emptyfreebsd · Level 1 | freebsd | Critical | 1 | Automated |
| TMA-FREEBSD-6.2.9 | Ensure root is the only UID 0 accountfreebsd · Level 1 | freebsd | Critical | 1 | Automated |
| TMA-FREEBSD-1.1.2.1.2 | Ensure nosuid option set on /tmp partitionfreebsd · Level 1 | freebsd | High | 1 | Automated |
| TMA-FREEBSD-1.1.2.2.2 | Ensure nosuid option set on /home partitionfreebsd · Level 1 | freebsd | High | 1 | Automated |
| TMA-FREEBSD-1.1.2.3.2 | Ensure nosuid option set on /var partitionfreebsd · Level 1 | freebsd | High | 1 | Automated |
| TMA-FREEBSD-1.1.2.4.2 | Ensure nosuid option set on /var/tmp partitionfreebsd · Level 1 | freebsd | High | 1 | Automated |
| TMA-FREEBSD-1.1.2.5.2 | Ensure nosuid option set on /var/log partitionfreebsd · Level 1 | freebsd | High | 1 | Automated |
| TMA-FREEBSD-1.1.2.6.2 | Ensure nosuid option set on /var/audit partitionfreebsd · Level 1 | freebsd | High | 1 | Automated |
| TMA-FREEBSD-1.3.1 | Ensure bootloader password is setfreebsd · Level 1 | freebsd | High | 1 | Automated |
| TMA-FREEBSD-2.2.2 | Ensure ftp server services are not in usefreebsd · Level 1 | freebsd | High | 1 | Automated |
| TMA-FREEBSD-2.2.5 | Ensure nis server services are not in usefreebsd · Level 1 | freebsd | High | 1 | Automated |
| TMA-FREEBSD-2.2.8 | Ensure telnet server services are not in usefreebsd · Level 1 | freebsd | High | 1 | Automated |
| TMA-FREEBSD-2.2.9 | Ensure tftp server services are not in usefreebsd · Level 1 | freebsd | High | 1 | Automated |
| TMA-FREEBSD-3.4.1.2 | Ensure a single firewall utility is in usefreebsd · Level 1 | freebsd | High | 1 | Automated |
| TMA-FREEBSD-4.1.1.3 | Ensure crontab is restricted to authorized usersfreebsd · Level 1 | freebsd | High | 1 | Automated |
| TMA-FREEBSD-4.1.2.1 | Ensure at is restricted to authorized usersfreebsd · Level 1 | freebsd | High | 1 | Automated |
| TMA-FREEBSD-4.2.6 | Ensure sshd Ciphers are configuredfreebsd · Level 1 | freebsd | High | 1 | Automated |
| TMA-FREEBSD-4.2.9 | Ensure sshd HostbasedAuthentication is disabledfreebsd · Level 1 | freebsd | High | 1 | Automated |
| TMA-FREEBSD-4.2.10 | Ensure sshd IgnoreRhosts is enabledfreebsd · Level 1 | freebsd | High | 1 | Automated |
| TMA-FREEBSD-4.2.11 | Ensure sshd KexAlgorithms is configuredfreebsd · Level 1 | freebsd | High | 1 | Automated |
| TMA-FREEBSD-4.2.14 | Ensure sshd MACs are configuredfreebsd · Level 1 | freebsd | High | 1 | Automated |
| TMA-FREEBSD-4.2.19 | Ensure sshd PermitRootLogin is disabledfreebsd · Level 1 | freebsd | High | 1 | Automated |
| TMA-FREEBSD-4.3.1 | Ensure sudo is installedfreebsd · Level 1 | freebsd | High | 1 | Automated |
| TMA-FREEBSD-4.3.2 | Ensure sudo commands use ptyfreebsd · Level 1 | freebsd | High | 1 | Automated |