Rule explorer
Browse every hardening rule in the catalog. Filter by platform, severity, profile level and whether the check can be automated.
228 rules foundof 8,597Page 1 of 10
| ID | Title | Platform | Severity | Level | Check |
|---|---|---|---|---|---|
| TMA-ROS-SROS2-ENFORCE | Ensure ROS 2 nodes run with SROS2 security enforcedros · Level 1 | ros | High | 1 | Automated |
| TMA-ROS1-1.10 | Disable rosmaster listening on all interfaces by defaultros · Level 1 | ros | High | 1 | Automated |
| TMA-ROS1-5.2.10 | Ensure SSH root login is disabledros · Level 1 | ros | High | 1 | Automated |
| TMA-ROS1-5.2.11 | Ensure SSH PermitEmptyPasswords is disabledros · Level 1 | ros | High | 1 | Automated |
| TMA-ROS1-6.2.1 | Ensure password fields are not emptyros · Level 1 | ros | High | 1 | Automated |
| TMA-ROS1-6.2.3 | Ensure root is the only UID 0 accountros · Level 1 | ros | High | 1 | Automated |
| TMA-ROS-DISCOVERY-RANGE | Ensure ROS 2 discovery is limited to the local hostros · Level 2 | ros | Medium | 2 | Automated |
| TMA-ROS-SROS2-POLICY | Ensure SROS2 governance and permissions enforce encryption and least privilegeros · Level 2 | ros | Medium | 2 | Manual review |
| TMA-ROS1-1.1.1.1 | Ensure mounting of cramfs filesystems is disabledros · Level 1 | ros | Medium | 1 | Automated |
| TMA-ROS1-1.1.1.2 | Ensure mounting of freevxfs filesystems is disabledros · Level 1 | ros | Medium | 1 | Automated |
| TMA-ROS1-1.1.1.3 | Ensure mounting of jffs2 filesystems is disabledros · Level 1 | ros | Medium | 1 | Automated |
| TMA-ROS1-1.1.1.4 | Ensure mounting of hfs filesystems is disabledros · Level 1 | ros | Medium | 1 | Automated |
| TMA-ROS1-1.1.1.5 | Ensure mounting of hfsplus filesystems is disabledros · Level 1 | ros | Medium | 1 | Automated |
| TMA-ROS1-1.1.1.6 | Ensure mounting of udf filesystems is disabledros · Level 1 | ros | Medium | 1 | Automated |
| TMA-ROS1-1.1.1.7 | Ensure mounting of FAT filesystems is limitedros · Level 1 | ros | Medium | 1 | Manual review |
| TMA-ROS1-1.1.3 | Ensure nodev option set on /tmp partitionros · Level 1 | ros | Medium | 1 | Automated |
| TMA-ROS1-1.1.4 | Ensure nosuid option set on /tmp partitionros · Level 1 | ros | Medium | 1 | Automated |
| TMA-ROS1-1.1.5 | Ensure noexec option set on /tmp partitionros · Level 1 | ros | Medium | 1 | Automated |
| TMA-ROS1-1.1.8 | Ensure nodev option set on /var/tmp partitionros · Level 1 | ros | Medium | 1 | Automated |
| TMA-ROS1-1.1.9 | Ensure nosuid option set on /var/tmp partitionros · Level 1 | ros | Medium | 1 | Automated |
| TMA-ROS1-1.1.10 | Ensure noexec option set on /var/tmp partitionros · Level 1 | ros | Medium | 1 | Automated |
| TMA-ROS1-1.1.14 | Ensure nodev option set on /home partitionros · Level 1 | ros | Medium | 1 | Automated |
| TMA-ROS1-1.1.15 | Ensure nodev option set on /dev/shm partitionros · Level 1 | ros | Medium | 1 | Automated |
| TMA-ROS1-1.1.16 | Ensure nosuid option set on /dev/shm partitionros · Level 1 | ros | Medium | 1 | Automated |
| TMA-ROS1-1.1.17 | Ensure noexec option set on /dev/shm partitionros · Level 1 | ros | Medium | 1 | Automated |