TMAegis

Trình khám phá quy tắc

Duyệt mọi quy tắc tăng cường bảo mật trong danh mục. Lọc theo nền tảng, mức độ nghiêm trọng, cấp hồ sơ và khả năng kiểm tra tự động.

Tìm thấy 134 quy tắctrên 16.927Trang 1 / 6

IDTiêu đềMức độ nghiêm trọng
TMA-KUBERNETES-1.1.13Ensure that the default administrative credential file permissions are set to 600kubernetes · Cấp 1Nghiêm trọng
TMA-KUBERNETES-1.1.14Ensure that the default administrative credential file ownership is set to root:rootkubernetes · Cấp 1Nghiêm trọng
TMA-KUBERNETES-1.2.1Ensure that anonymous requests to the API server are restrictedkubernetes · Cấp 1Nghiêm trọng
TMA-KUBERNETES-1.2.2Ensure that the --token-auth-file parameter is not setkubernetes · Cấp 1Nghiêm trọng
TMA-KUBERNETES-1.2.6Ensure that the --authorization-mode argument is not set to AlwaysAllowkubernetes · Cấp 1Nghiêm trọng
TMA-KUBERNETES-4.2.1Ensure that the --anonymous-auth argument is set to falsekubernetes · Cấp 1Nghiêm trọng
TMA-KUBERNETES-4.2.2Ensure that the --authorization-mode argument is not set to AlwaysAllowkubernetes · Cấp 1Nghiêm trọng
TMA-KUBERNETES-5.1.1Ensure that the cluster-admin role is only used where requiredkubernetes · Cấp 1Nghiêm trọng
TMA-KUBERNETES-5.1.7Avoid use of system:masters groupkubernetes · Cấp 1Nghiêm trọng
TMA-KUBERNETES-5.2.2Minimize the admission of privileged containerskubernetes · Cấp 1Nghiêm trọng
TMA-KUBERNETES-1.1.7Ensure that the etcd pod specification file permissions are set to 600 or more restrictivekubernetes · Cấp 1Cao
TMA-KUBERNETES-1.1.8Ensure that the etcd pod specification file ownership is set to root:rootkubernetes · Cấp 1Cao
TMA-KUBERNETES-1.1.11Ensure that the etcd data directory permissions are set to 700 or more restrictivekubernetes · Cấp 1Cao
TMA-KUBERNETES-1.1.12Ensure that the etcd data directory ownership is set to etcd:etcdkubernetes · Cấp 1Cao
TMA-KUBERNETES-1.1.20Ensure that the Kubernetes PKI certificate file permissions are set to 644 or more restrictivekubernetes · Cấp 1Cao
TMA-KUBERNETES-1.2.4Ensure that the --kubelet-client-certificate and --kubelet-client-key arguments are set as appropriatekubernetes · Cấp 1Cao
TMA-KUBERNETES-1.2.5Ensure that the --kubelet-certificate-authority argument is set as appropriatekubernetes · Cấp 1Cao
TMA-KUBERNETES-1.2.7Ensure that the --authorization-mode argument includes Nodekubernetes · Cấp 1Cao
TMA-KUBERNETES-1.2.8Ensure that the --authorization-mode argument includes RBACkubernetes · Cấp 1Cao
TMA-KUBERNETES-1.2.22Ensure that the --service-account-key-file argument is set as appropriatekubernetes · Cấp 1Cao
TMA-KUBERNETES-1.2.23Ensure that the --etcd-certfile and --etcd-keyfile arguments are set as appropriatekubernetes · Cấp 1Cao
TMA-KUBERNETES-1.2.24Ensure that the --tls-cert-file and --tls-private-key-file arguments are set as appropriatekubernetes · Cấp 1Cao
TMA-KUBERNETES-1.2.25Ensure that the --client-ca-file argument is set as appropriatekubernetes · Cấp 1Cao
TMA-KUBERNETES-1.2.26Ensure that the --etcd-cafile argument is set as appropriatekubernetes · Cấp 1Cao
TMA-KUBERNETES-1.2.27Ensure that the --encryption-provider-config argument is set as appropriatekubernetes · Cấp 1Cao