Rule explorer
Browse every hardening rule in the catalogue. Filter by platform, severity, profile level and whether the check can be automated.
6 rules foundof 8,597Page 1 of 1
| ID | Title | Platform | Severity | Level | Check |
|---|---|---|---|---|---|
| TMA-LXD-INSTANCE-PRIVILEGED | Ensure no LXD instance runs as a privileged containerlxd · Level 1 | lxd | Critical | 1 | Automated |
| TMA-LXD-GROUP-MEMBERS | Ensure membership of the lxd group is limited to administratorslxd · Level 1 | lxd | High | 1 | Manual review |
| TMA-LXD-HTTPS-ADDRESS | Ensure the LXD remote API is not listening on all interfaceslxd · Level 1 | lxd | High | 1 | Automated |
| TMA-LXD-TRUST-PASSWORD | Ensure core.trust_password is not setlxd · Level 1 | lxd | High | 1 | Automated |
| TMA-LXD-INSTANCE-NESTING | Ensure LXD instances do not enable container nestinglxd · Level 2 | lxd | Medium | 2 | Automated |
| TMA-LXD-INSTANCE-RAW-LXC | Ensure LXD instances do not use raw.lxc or raw.apparmor overrideslxd · Level 2 | lxd | Medium | 2 | Automated |