Rule explorer
Browse every hardening rule in the catalog. Filter by platform, severity, profile level and whether the check can be automated.
22 rules foundof 8,597Page 1 of 1
| ID | Title | Platform | Severity | Level | Check |
|---|---|---|---|---|---|
| CIS-UBUNTU-5.2.8 | Ensure SSH root login is disabledlinux · Level 1 | linux | High | 1 | Automated |
| CIS-UBUNTU-5.2.10 | Ensure SSH PermitEmptyPasswords is disabledlinux · Level 1 | linux | High | 1 | Automated |
| TMA-LNX-KERN-ASLR | Ensure address space layout randomization is enabledlinux · Level 1 | linux | High | 1 | Automated |
| TMA-LNX-PERM-GROUP | Ensure permissions on /etc/group are configuredlinux · Level 1 | linux | High | 1 | Automated |
| TMA-LNX-PERM-PASSWD | Ensure permissions on /etc/passwd are configuredlinux · Level 1 | linux | High | 1 | Automated |
| TMA-LNX-PERM-SHADOW-RHEL | Ensure permissions on /etc/shadow are configuredlinux · Level 1 | linux | High | 1 | Automated |
| TMA-LNX-PERM-SHADOW-UBUNTU | Ensure permissions on /etc/shadow are configuredlinux · Level 1 | linux | High | 1 | Automated |
| TMA-LNX-PERM-SSHD-CONFIG | Ensure permissions on /etc/ssh/sshd_config are configuredlinux · Level 1 | linux | High | 1 | Automated |
| CIS-LINUX-3.2.1 | Ensure IP forwarding is disabledlinux · Level 1 | linux | Medium | 1 | Automated |
| TMA-LNX-AUDIT-ENABLED | Ensure auditd service is enabledlinux · Level 2 | linux | Medium | 2 | Automated |
| TMA-LNX-KERN-CORE-LIMIT | Ensure core dumps are restrictedlinux · Level 1 | linux | Medium | 1 | Automated |
| TMA-LNX-KERN-SUID-DUMPABLE | Ensure setuid programs cannot dump corelinux · Level 1 | linux | Medium | 1 | Automated |
| TMA-LNX-NET-ACCEPT-REDIRECTS | Ensure ICMP redirects are not acceptedlinux · Level 1 | linux | Medium | 1 | Automated |
| TMA-LNX-NET-SEND-REDIRECTS | Ensure packet redirect sending is disabledlinux · Level 1 | linux | Medium | 1 | Automated |
| TMA-LNX-NET-SOURCE-ROUTE | Ensure source routed packets are not acceptedlinux · Level 1 | linux | Medium | 1 | Automated |
| TMA-LNX-NET-SYNCOOKIES | Ensure TCP SYN cookies are enabledlinux · Level 1 | linux | Medium | 1 | Automated |
| TMA-LNX-PAM-MAXDAYS | Ensure password expiration is 365 days or lesslinux · Level 1 | linux | Medium | 1 | Automated |
| TMA-LNX-SSH-HOSTBASED | Ensure SSH HostbasedAuthentication is disabledlinux · Level 1 | linux | Medium | 1 | Automated |
| TMA-LNX-SSH-IGNORERHOSTS | Ensure SSH IgnoreRhosts is enabledlinux · Level 1 | linux | Medium | 1 | Automated |
| TMA-LNX-SSH-LOGINGRACE | Ensure SSH LoginGraceTime is 60 seconds or lesslinux · Level 1 | linux | Medium | 1 | Automated |
| TMA-LNX-SSH-MAXAUTH | Ensure SSH MaxAuthTries is 4 or lesslinux · Level 1 | linux | Medium | 1 | Automated |
| TMA-LNX-SSH-X11 | Ensure SSH X11 forwarding is disabledlinux · Level 1 | linux | Medium | 1 | Automated |