TMAegisBeta

Pregledač pravila

Pregledajte svako pravilo za ojačavanje bezbednosti u katalogu. Filtrirajte po platformi, ozbiljnosti, nivou profila i tome da li se provera može automatizovati.

Pronađeno 115 pravilaod 16.927Stranica 5 od 5

IDNaslovOzbiljnost
TMA-OPENSHIFT-5.2.7Minimize the admission of containers with the NET_RAW capabilityopenshift · Nivo 1Srednja
TMA-OPENSHIFT-5.2.8Minimize the admission of containers with added capabilitiesopenshift · Nivo 1Srednja
TMA-OPENSHIFT-5.2.9Minimize the admission of containers with capabilities assignedopenshift · Nivo 2Srednja
TMA-OPENSHIFT-5.3.1Ensure that the CNI in use supports Network Policiesopenshift · Nivo 1Srednja
TMA-OPENSHIFT-5.3.2Ensure that all Namespaces have Network Policies definedopenshift · Nivo 2Srednja
TMA-OPENSHIFT-5.4.1Prefer using secrets as files over secrets as environment variablesopenshift · Nivo 2Srednja
TMA-OPENSHIFT-5.4.2Consider external secret storageopenshift · Nivo 2Srednja
TMA-OPENSHIFT-4.2.1Activate Garbage collection in OpenShift Container Platform 4, as appropriateopenshift · Nivo 1Niska
TMA-OPENSHIFT-4.2.8Ensure that the kubeAPIQPS [--event-qps] argument is set to a level which ensures appropriate event captureopenshift · Nivo 2Niska
TMA-OPENSHIFT-5.2.10Minimize access to privileged Security Context Constraintsopenshift · Nivo 2Niska
TMA-OPENSHIFT-5.5.1Configure Image Provenance using image controller configuration parametersopenshift · Nivo 2Niska
TMA-OPENSHIFT-5.7.1Create administrative boundaries between resources using namespacesopenshift · Nivo 1Niska
TMA-OPENSHIFT-5.7.2Ensure that the seccomp profile is set to docker/default in your pod definitionsopenshift · Nivo 2Niska
TMA-OPENSHIFT-5.7.3Apply Security Context to Your Pods and Containersopenshift · Nivo 2Niska
TMA-OPENSHIFT-5.7.4The default namespace should not be usedopenshift · Nivo 2Niska