Rule explorer
Browse every hardening rule in the catalog. Filter by platform, severity, profile level and whether the check can be automated.
61 rules foundof 8,597Page 1 of 3
| ID | Title | Platform | Severity | Level | Check |
|---|---|---|---|---|---|
| TMA-TOMCAT-4.3 | Restrict access to Tomcat configuration directorytomcat · Level 1 | tomcat | High | 1 | Automated |
| TMA-TOMCAT-4.12 | Restrict access to Tomcat server.xmltomcat · Level 1 | tomcat | High | 1 | Automated |
| TMA-TOMCAT-4.13 | Restrict access to Tomcat tomcat-users.xmltomcat · Level 1 | tomcat | High | 1 | Automated |
| TMA-TOMCAT-6.5 | Ensure 'sslProtocol' is Configured Correctly for Secure Connectorstomcat · Level 1 | tomcat | High | 1 | Automated |
| TMA-TOMCAT-10.2 | Restrict access to the web administration applicationtomcat · Level 1 | tomcat | High | 1 | Automated |
| TMA-TOMCAT-10.3 | Restrict manager applicationtomcat · Level 2 | tomcat | High | 2 | Automated |
| TMA-TOMCAT-3.1 | Set a nondeterministic Shutdown command valuetomcat · Level 1 | tomcat | Medium | 1 | Automated |
| TMA-TOMCAT-3.2 | Disable the Shutdown porttomcat · Level 2 | tomcat | Medium | 2 | Automated |
| TMA-TOMCAT-4.1 | Restrict access to $CATALINA_HOMEtomcat · Level 1 | tomcat | Medium | 1 | Automated |
| TMA-TOMCAT-4.2 | Restrict access to $CATALINA_BASEtomcat · Level 1 | tomcat | Medium | 1 | Automated |
| TMA-TOMCAT-4.4 | Restrict access to Tomcat logs directorytomcat · Level 1 | tomcat | Medium | 1 | Automated |
| TMA-TOMCAT-4.5 | Restrict access to Tomcat temp directorytomcat · Level 1 | tomcat | Medium | 1 | Automated |
| TMA-TOMCAT-4.6 | Restrict access to Tomcat binaries directorytomcat · Level 1 | tomcat | Medium | 1 | Automated |
| TMA-TOMCAT-4.7 | Restrict access to Tomcat web application directorytomcat · Level 1 | tomcat | Medium | 1 | Automated |
| TMA-TOMCAT-4.8 | Restrict access to Tomcat catalina.propertiestomcat · Level 1 | tomcat | Medium | 1 | Automated |
| TMA-TOMCAT-4.9 | Restrict access to Tomcat catalina.policytomcat · Level 1 | tomcat | Medium | 1 | Automated |
| TMA-TOMCAT-4.10 | Restrict access to Tomcat context.xmltomcat · Level 1 | tomcat | Medium | 1 | Automated |
| TMA-TOMCAT-4.11 | Restrict access to Tomcat logging.propertiestomcat · Level 1 | tomcat | Medium | 1 | Automated |
| TMA-TOMCAT-4.14 | Restrict access to Tomcat web.xmltomcat · Level 1 | tomcat | Medium | 1 | Automated |
| TMA-TOMCAT-4.15 | Restrict access to jaspic-providers.xmltomcat · Level 1 | tomcat | Medium | 1 | Automated |
| TMA-TOMCAT-6.2 | Ensure SSLEnabled is set to True for Sensitive Connectorstomcat · Level 1 | tomcat | Medium | 1 | Manual review |
| TMA-TOMCAT-6.3 | Ensure scheme is set accuratelytomcat · Level 1 | tomcat | Medium | 1 | Automated |
| TMA-TOMCAT-6.4 | Ensure secure is set to true only for SSL-enabled Connectorstomcat · Level 1 | tomcat | Medium | 1 | Automated |
| TMA-TOMCAT-7.2 | Specify file handler in logging.properties filestomcat · Level 1 | tomcat | Medium | 1 | Automated |
| TMA-TOMCAT-7.4 | Ensure directory in context.xml is a secure locationtomcat · Level 1 | tomcat | Medium | 1 | Manual review |