Rule explorer
Browse every hardening rule in the catalog. Filter by platform, severity, profile level and whether the check can be automated.
98 rules foundof 11,219Page 1 of 4
| ID | Title | Platform | Severity | Level | Check |
|---|---|---|---|---|---|
| TMA-ORACLE-DB-4.1 | Ensure All Default Passwords Are Changedoracle-db · Level 1 | oracle-db | Critical | 1 | Automated |
| TMA-ORACLE-REMOTE-OS-AUTHENT | Ensure 'REMOTE_OS_AUTHENT' is set to FALSEoracle-db · Level 1 | oracle-db | Critical | 1 | Automated |
| TMA-ORACLE-DB-1.1 | Ensure That Appropriate Version/Patches For Oracle Software Are Installedoracle-db · Level 1 | oracle-db | High | 1 | Manual review |
| TMA-ORACLE-DB-2.1.1 | Ensure 'extproc' Is Not Present In 'listener.ora'oracle-db · Level 1 | oracle-db | High | 1 | Automated |
| TMA-ORACLE-DB-2.2.5 | Ensure 'SQLNET.ALLOWED_LOGON_VERSION_SERVER' Is Set To 12aoracle-db · Level 1 | oracle-db | High | 1 | Automated |
| TMA-ORACLE-DB-2.2.6 | Ensure 'SQLNET.ENCRYPTION_CLIENT Is Set To 'REQUIRED'oracle-db · Level 1 | oracle-db | High | 1 | Automated |
| TMA-ORACLE-DB-2.2.7 | Ensure 'SQLNET.ENCRYPTION_SERVER' Is Set To 'REQUIRED'oracle-db · Level 1 | oracle-db | High | 1 | Automated |
| TMA-ORACLE-DB-2.2.9 | Ensure 'SQLNET.ENCRYPTION_TYPES_SERVER' Is Set To AES256oracle-db · Level 1 | oracle-db | High | 1 | Manual review |
| TMA-ORACLE-DB-2.3.7 | Ensure 'REMOTE_OS_ROLES' Is Set To 'FALSE'oracle-db · Level 1 | oracle-db | High | 1 | Automated |
| TMA-ORACLE-DB-2.3.12 | Ensure 'REMOTE_LOGIN_PASSWORDFILE' Is Set To 'NONE'oracle-db · Level 1 | oracle-db | High | 1 | Automated |
| TMA-ORACLE-DB-4.4 | Ensure Old Password Versions Are Not Usedoracle-db · Level 1 | oracle-db | High | 1 | Automated |
| TMA-ORACLE-DB-5.1 | Ensure All Auditable System Actions Commands Are Auditedoracle-db · Level 1 | oracle-db | High | 1 | Automated |
| TMA-ORACLE-DB-5.2 | Ensure the 'LOGON' AND 'LOGOFF' Actions Audit Is Enabledoracle-db · Level 1 | oracle-db | High | 1 | Automated |
| TMA-ORACLE-DB-5.5 | Ensure The Use Of SYS* Privileges Is Auditedoracle-db · Level 1 | oracle-db | High | 1 | Automated |
| TMA-ORACLE-DB-6.1.1 | Ensure '%ANY%' Is Revoked from Unauthorized 'GRANTEE'oracle-db · Level 1 | oracle-db | High | 1 | Automated |
| TMA-ORACLE-DB-6.1.2 | Ensure Admin Privileges Are Revoked from Unauthorized 'GRANTEE'oracle-db · Level 1 | oracle-db | High | 1 | Automated |
| TMA-ORACLE-DB-6.1.3 | Ensure 'IMPORT' And 'EXPORT' 'FULL DATABASE' Is Revoked From Unauthorized 'GRANTEE'oracle-db · Level 1 | oracle-db | High | 1 | Automated |
| TMA-ORACLE-DB-6.1.4 | Ensure 'CREATE EXTERNAL JOB' Is Revoked From Unauthorized 'GRANTEE'oracle-db · Level 1 | oracle-db | High | 1 | Automated |
| TMA-ORACLE-DB-6.1.5 | Ensure 'BECOME USER' Is Revoked From Unauthorized 'GRANTEE'oracle-db · Level 1 | oracle-db | High | 1 | Automated |
| TMA-ORACLE-DB-6.1.9 | Ensure 'ALTER SYSTEM' Is Revoked From Unauthorized 'GRANTEE'oracle-db · Level 1 | oracle-db | High | 1 | Automated |
| TMA-ORACLE-DB-6.1.10 | Ensure 'CREATE LIBRARY' Is Revoked From Unauthorized 'GRANTEE'oracle-db · Level 1 | oracle-db | High | 1 | Automated |
| TMA-ORACLE-DB-6.2.1 | Ensure 'DBA' Is Revoked from Unauthorized 'GRANTEE'oracle-db · Level 1 | oracle-db | High | 1 | Automated |
| TMA-ORACLE-DB-6.2.2 | Ensure 'EXP_FULL_DATABASE' Is Revoked From Unauthorized 'GRANTEE'oracle-db · Level 1 | oracle-db | High | 1 | Automated |
| TMA-ORACLE-DB-6.2.3 | Ensure 'IMP_FULL_DATABASE' Is Revoked From Unauthorized 'GRANTEE'oracle-db · Level 1 | oracle-db | High | 1 | Automated |
| TMA-ORACLE-DB-6.2.4 | Ensure 'DATAPUMP_EXP_FULL_DATABASE' Is Revoked From Unauthorized 'GRANTEE'oracle-db · Level 1 | oracle-db | High | 1 | Automated |