Rule explorer
Browse every hardening rule in the catalog. Filter by platform, severity, profile level and whether the check can be automated.
42 rules foundof 16,927Page 1 of 2
| ID | Title | Platform | Severity | Level | Check |
|---|---|---|---|---|---|
| TMA-OCEANBASE-4.1.1 | Ensure Passwords are Set for All OceanBase Accountsoceanbase · Level 1 | oceanbase | Critical | 1 | Automated |
| TMA-OCEANBASE-5.1.6 | Ensure Passwords are Set for All Accountsoceanbase · Level 1 | oceanbase | Critical | 1 | Automated |
| TMA-OCEANBASE-1.3 | Ensure 'data_dir' Has Appropriate Permissionsoceanbase · Level 1 | oceanbase | High | 1 | Manual review |
| TMA-OCEANBASE-1.4 | Use Dedicated Least Privileged Account for OceanBase Daemon/Serviceoceanbase · Level 1 | oceanbase | High | 1 | Automated |
| TMA-OCEANBASE-2.1 | Ensure the Appropriate Version for OceanBase Software Is Installedoceanbase · Level 1 | oceanbase | High | 1 | Manual review |
| TMA-OCEANBASE-3.1.1 | Backup Strategy in Placeoceanbase · Level 1 | oceanbase | High | 1 | Manual review |
| TMA-OCEANBASE-3.2.1 | Limit Accepted Transport Layer Security (TLS) Versionsoceanbase · Level 1 | oceanbase | High | 1 | Automated |
| TMA-OCEANBASE-3.2.2 | Only Approved Servers can Accessoceanbase · Level 1 | oceanbase | High | 1 | Automated |
| TMA-OCEANBASE-3.2.3 | Limit Accepted TLS Versionsoceanbase · Level 2 | oceanbase | High | 2 | Automated |
| TMA-OCEANBASE-3.3 | Ensure Replication Traffic is Securedoceanbase · Level 1 | oceanbase | High | 1 | Automated |
| TMA-OCEANBASE-4.1.7 | Ensure No Users Have Wildcard Hostnamesoceanbase · Level 2 | oceanbase | High | 2 | Automated |
| TMA-OCEANBASE-4.2.1 | Ensure 'CREATE USER' is Not Granted to Non-Administrative Usersoceanbase · Level 1 | oceanbase | High | 1 | Automated |
| TMA-OCEANBASE-4.2.3 | Ensure 'SUPER' is Not Granted to Non-Administrative Usersoceanbase · Level 1 | oceanbase | High | 1 | Automated |
| TMA-OCEANBASE-4.3.1 | Use TDE for At-Rest Data Encryptionoceanbase · Level 1 | oceanbase | High | 1 | Automated |
| TMA-OCEANBASE-4.4.1 | Ensure ALL Events are Auditedoceanbase · Level 2 | oceanbase | High | 2 | Automated |
| TMA-OCEANBASE-5.2.1 | Public Role Privilegesoceanbase · Level 1 | oceanbase | High | 1 | Automated |
| TMA-OCEANBASE-5.2.3 | Only Allowed Client can Access to Clusteroceanbase · Level 1 | oceanbase | High | 1 | Automated |
| TMA-OCEANBASE-5.3.1 | Use TDE for At-Rest Data Encryptionoceanbase · Level 1 | oceanbase | High | 1 | Manual review |
| TMA-OCEANBASE-5.4.1 | Ensure 'AUDIT_TRAIL' is not set to NONEoceanbase · Level 1 | oceanbase | High | 1 | Automated |
| TMA-OCEANBASE-1.1 | Place Databases on Non-System Partitionsoceanbase · Level 1 | oceanbase | Medium | 1 | Manual review |
| TMA-OCEANBASE-1.2 | Ensure the Partition Size for Log Files is Large Enoughoceanbase · Level 1 | oceanbase | Medium | 1 | Manual review |
| TMA-OCEANBASE-2.2 | Use OceanBase Official Signed Installation Packagesoceanbase · Level 1 | oceanbase | Medium | 1 | Manual review |
| TMA-OCEANBASE-3.1.3 | Configure Alert Threshold for Unexpected Backup Eventsoceanbase · Level 1 | oceanbase | Medium | 1 | Manual review |
| TMA-OCEANBASE-3.1.4 | Point-in-Time Recoveryoceanbase · Level 1 | oceanbase | Medium | 1 | Manual review |
| TMA-OCEANBASE-3.1.5 | Verify Backups are Goodoceanbase · Level 1 | oceanbase | Medium | 1 | Manual review |