Rule explorer
Browse every hardening rule in the catalog. Filter by platform, severity, profile level and whether the check can be automated.
54 rules foundof 8,597Page 1 of 3
| ID | Title | Platform | Severity | Level | Check |
|---|---|---|---|---|---|
| TMA-YUGABYTEDB-5.1 | Ensure that authentication is enabled for YCQL interface of the YugabyteDByugabytedb · Level 2 | yugabytedb | Critical | 2 | Automated |
| TMA-YUGABYTEDB-5.2 | Ensure that the default password changed for the cassandra roleyugabytedb · Level 2 | yugabytedb | Critical | 2 | Automated |
| TMA-YUGABYTEDB-5.6 | Ensure ysql_enable_auth is set to trueyugabytedb · Level 1 | yugabytedb | Critical | 1 | Automated |
| TMA-YUGABYTEDB-5.7 | Ensure the default password is changed for the yugabyte superuseryugabytedb · Level 1 | yugabytedb | Critical | 1 | Automated |
| TMA-YUGABYTEDB-1.3 | Ensure Data Cluster Initialized Successfullyyugabytedb · Level 1 | yugabytedb | High | 1 | Automated |
| TMA-YUGABYTEDB-1.5 | Ensure latest version of YugabyteDB is installedyugabytedb · Level 2 | yugabytedb | High | 2 | Manual review |
| TMA-YUGABYTEDB-1.6 | Ensure the YugabyteDB service is run as a non-root useryugabytedb · Level 2 | yugabytedb | High | 2 | Automated |
| TMA-YUGABYTEDB-3.2 | Ensure the YugabyteDB Audit Extension (pgAudit) is enabledyugabytedb · Level 1 | yugabytedb | High | 1 | Automated |
| TMA-YUGABYTEDB-4.2 | Ensure excessive administrative privileges are revokedyugabytedb · Level 1 | yugabytedb | High | 1 | Manual review |
| TMA-YUGABYTEDB-5.3 | Ensure the cassandra and superuser roles are separateyugabytedb · Level 2 | yugabytedb | High | 2 | Automated |
| TMA-YUGABYTEDB-5.8 | Ensure HBA configuration prohibits weak authentication methodsyugabytedb · Level 1 | yugabytedb | High | 1 | Manual review |
| TMA-YUGABYTEDB-5.9 | Ensure password_encryption is set to scram-sha-256yugabytedb · Level 1 | yugabytedb | High | 1 | Automated |
| TMA-YUGABYTEDB-6.2 | Ensure login via "host" TCP/IP Socket is configured correctlyyugabytedb · Level 1 | yugabytedb | High | 1 | Manual review |
| TMA-YUGABYTEDB-7.2 | Ensure TLS is enabled and configured correctly: server to serveryugabytedb · Level 1 | yugabytedb | High | 1 | Automated |
| TMA-YUGABYTEDB-7.3 | Ensure TLS is enabled and configured correctly: client to serveryugabytedb · Level 1 | yugabytedb | High | 1 | Automated |
| TMA-YUGABYTEDB-8.1 | Ensure base backups are configured and functionalyugabytedb · Level 1 | yugabytedb | High | 1 | Manual review |
| TMA-YUGABYTEDB-1.1 | Ensure packages are obtained from authorized repositoriesyugabytedb · Level 1 | yugabytedb | Medium | 1 | Manual review |
| TMA-YUGABYTEDB-1.4 | Ensure a separate user and group exist for YugabyteDByugabytedb · Level 2 | yugabytedb | Medium | 2 | Automated |
| TMA-YUGABYTEDB-1.7 | Ensure clocks are synchronized on all nodesyugabytedb · Level 2 | yugabytedb | Medium | 2 | Automated |
| TMA-YUGABYTEDB-2.1 | Ensure the file permissions mask is correctyugabytedb · Level 1 | yugabytedb | Medium | 1 | Manual review |
| TMA-YUGABYTEDB-3.1.1 | Ensure the log destinations are set correctlyyugabytedb · Level 1 | yugabytedb | Medium | 1 | Manual review |
| TMA-YUGABYTEDB-3.1.3 | Ensure the log file permissions are set correctlyyugabytedb · Level 1 | yugabytedb | Medium | 1 | Automated |
| TMA-YUGABYTEDB-3.1.11 | Ensure the correct messages are written to the server logyugabytedb · Level 1 | yugabytedb | Medium | 1 | Automated |
| TMA-YUGABYTEDB-3.1.12 | Ensure the correct YSQL statements generating errors are recordedyugabytedb · Level 1 | yugabytedb | Medium | 1 | Automated |
| TMA-YUGABYTEDB-3.1.17 | Ensure 'log_connections' is enabledyugabytedb · Level 1 | yugabytedb | Medium | 1 | Automated |