TMAegisBeta

Pregledač pravila

Pregledajte svako pravilo za ojačavanje bezbednosti u katalogu. Filtrirajte po platformi, ozbiljnosti, nivou profila i tome da li se provera može automatizovati.

Pronađeno 115 pravilaod 16.927Stranica 4 od 5

IDNaslovOzbiljnost
TMA-OPENSHIFT-1.2.30Ensure that the API Server only makes use of Strong Cryptographic Ciphersopenshift · Nivo 1Srednja
TMA-OPENSHIFT-1.2.31Ensure unsupported configuration overrides are not usedopenshift · Nivo 1Srednja
TMA-OPENSHIFT-1.3.2Ensure that the --use-service-account-credentials argument is set to trueopenshift · Nivo 1Srednja
TMA-OPENSHIFT-1.3.4Ensure that the --root-ca-file argument is set as appropriateopenshift · Nivo 1Srednja
TMA-OPENSHIFT-2.7Ensure that a unique Certificate Authority is used for etcdopenshift · Nivo 2Srednja
TMA-OPENSHIFT-3.1.1Client certificate authentication should not be used for usersopenshift · Nivo 2Srednja
TMA-OPENSHIFT-3.2.1Ensure that a minimal audit policy is createdopenshift · Nivo 1Srednja
TMA-OPENSHIFT-3.2.2Ensure that the audit policy covers key security concernsopenshift · Nivo 2Srednja
TMA-OPENSHIFT-4.1.1Ensure that the kubelet service file permissions are set to 644 or more restrictiveopenshift · Nivo 1Srednja
TMA-OPENSHIFT-4.1.2Ensure that the kubelet service file ownership is set to root:rootopenshift · Nivo 1Srednja
TMA-OPENSHIFT-4.1.3If proxy kube proxy configuration file exists ensure permissions are set to 644 or more restrictiveopenshift · Nivo 1Srednja
TMA-OPENSHIFT-4.1.4If proxy kubeconfig file exists ensure ownership is set to root:rootopenshift · Nivo 1Srednja
TMA-OPENSHIFT-4.1.5Ensure that the --kubeconfig kubelet.conf file permissions are set to 644 or more restrictiveopenshift · Nivo 1Srednja
TMA-OPENSHIFT-4.1.6Ensure that the --kubeconfig kubelet.conf file ownership is set to root:rootopenshift · Nivo 1Srednja
TMA-OPENSHIFT-4.1.9Ensure that the kubelet --config configuration file has permissions set to 600 or more restrictiveopenshift · Nivo 1Srednja
TMA-OPENSHIFT-4.1.10Ensure that the kubelet configuration file ownership is set to root:rootopenshift · Nivo 1Srednja
TMA-OPENSHIFT-4.2.5Verify that the read only port is not used or is set to 0openshift · Nivo 1Srednja
TMA-OPENSHIFT-4.2.6Ensure that the --streaming-connection-idle-timeout argument is not set to 0openshift · Nivo 1Srednja
TMA-OPENSHIFT-4.2.7Ensure that the --make-iptables-util-chains argument is set to trueopenshift · Nivo 1Srednja
TMA-OPENSHIFT-4.2.10Ensure that the --rotate-certificates argument is not set to falseopenshift · Nivo 2Srednja
TMA-OPENSHIFT-4.2.11Verify that the RotateKubeletServerCertificate argument is set to trueopenshift · Nivo 2Srednja
TMA-OPENSHIFT-4.2.12Ensure that the Kubelet only makes use of Strong Cryptographic Ciphersopenshift · Nivo 1Srednja
TMA-OPENSHIFT-5.1.3Minimize wildcard use in Roles and ClusterRolesopenshift · Nivo 1Srednja
TMA-OPENSHIFT-5.1.4Minimize access to create podsopenshift · Nivo 1Srednja
TMA-OPENSHIFT-5.2.6Minimize the admission of root containersopenshift · Nivo 2Srednja