TMAegis
vi

Trình khám phá quy tắc

Duyệt mọi quy tắc tăng cường bảo mật trong danh mục. Lọc theo nền tảng, mức độ nghiêm trọng, cấp hồ sơ và khả năng kiểm tra tự động.

Tìm thấy 115 quy tắctrên 16.927Trang 1 / 5

IDTiêu đềMức độ nghiêm trọng
TMA-OPENSHIFT-1.2.1Ensure that anonymous requests are authorizedopenshift · Cấp 1Nghiêm trọng
TMA-OPENSHIFT-1.2.5Ensure that the --authorization-mode argument is not set to AlwaysAllowopenshift · Cấp 1Nghiêm trọng
TMA-OPENSHIFT-4.2.2Ensure that the --anonymous-auth argument is set to falseopenshift · Cấp 1Nghiêm trọng
TMA-OPENSHIFT-4.2.3Ensure that the --authorization-mode argument is not set to AlwaysAllowopenshift · Cấp 1Nghiêm trọng
TMA-OPENSHIFT-5.1.1Ensure that the cluster-admin role is only used where requiredopenshift · Cấp 1Nghiêm trọng
TMA-OPENSHIFT-5.2.1Minimize the admission of privileged containersopenshift · Cấp 1Nghiêm trọng
TMA-OPENSHIFT-1.1.7Ensure that the etcd pod specification file permissions are set to 600 or more restrictiveopenshift · Cấp 1Cao
TMA-OPENSHIFT-1.1.8Ensure that the etcd pod specification file ownership is set to root:rootopenshift · Cấp 1Cao
TMA-OPENSHIFT-1.1.11Ensure that the etcd data directory permissions are set to 700 or more restrictiveopenshift · Cấp 1Cao
TMA-OPENSHIFT-1.1.12Ensure that the etcd data directory ownership is set to root:rootopenshift · Cấp 1Cao
TMA-OPENSHIFT-1.1.20Ensure that the OpenShift PKI certificate file permissions are set to 600 or more restrictiveopenshift · Cấp 1Cao
TMA-OPENSHIFT-1.2.3Ensure that the kubelet uses certificates to authenticateopenshift · Cấp 1Cao
TMA-OPENSHIFT-1.2.4Verify that the kubelet certificate authority is set as appropriateopenshift · Cấp 1Cao
TMA-OPENSHIFT-1.2.6Verify that RBAC is enabledopenshift · Cấp 1Cao
TMA-OPENSHIFT-1.2.13Ensure that the admission control plugin NodeRestriction is setopenshift · Cấp 1Cao
TMA-OPENSHIFT-1.2.17Ensure that the healthz endpoint is protected by RBACopenshift · Cấp 1Cao
TMA-OPENSHIFT-1.2.24Ensure that the --service-account-key-file argument is set as appropriateopenshift · Cấp 1Cao
TMA-OPENSHIFT-1.2.25Ensure that the --etcd-certfile and --etcd-keyfile arguments are set as appropriateopenshift · Cấp 1Cao
TMA-OPENSHIFT-1.2.26Ensure that the --tls-cert-file and --tls-private-key-file arguments are set as appropriateopenshift · Cấp 1Cao
TMA-OPENSHIFT-1.2.27Ensure that the --client-ca-file argument is set as appropriateopenshift · Cấp 1Cao
TMA-OPENSHIFT-1.2.28Ensure that the --etcd-cafile argument is set as appropriateopenshift · Cấp 1Cao
TMA-OPENSHIFT-1.2.29Ensure that encryption providers are appropriately configuredopenshift · Cấp 1Cao
TMA-OPENSHIFT-1.3.1Ensure that controller manager healthz endpoints are protected by RBACopenshift · Cấp 1Cao
TMA-OPENSHIFT-1.3.3Ensure that the --service-account-private-key-file argument is set as appropriateopenshift · Cấp 1Cao
TMA-OPENSHIFT-1.4.1Ensure that the healthz endpoints for the scheduler are protected by RBACopenshift · Cấp 1Cao