Rule explorer
Browse every hardening rule in the catalogue. Filter by platform, severity, profile level and whether the check can be automated.
75 rules foundof 8,597Page 1 of 3
| ID | Title | Platform | Severity | Level | Check |
|---|---|---|---|---|---|
| TMA-MARIADB-4.5 | Ensure mariadb is Not Started With 'skip-grant-tables'mariadb · Level 1 | mariadb | Critical | 1 | Automated |
| TMA-MARIADB-7.3 | Ensure strong authentication is utilized for all accountsmariadb · Level 1 | mariadb | Critical | 1 | Automated |
| TMA-MARIADB-1.2 | Use Dedicated Least Privileged Account for MariaDB Daemon/Servicemariadb · Level 1 | mariadb | High | 1 | Automated |
| TMA-MARIADB-2.10 | Limit Accepted Transport Layer Security (TLS) Versionsmariadb · Level 2 | mariadb | High | 2 | Automated |
| TMA-MARIADB-3.1 | Ensure 'datadir' Has Appropriate Permissionsmariadb · Level 1 | mariadb | High | 1 | Automated |
| TMA-MARIADB-3.7 | Ensure SSL Key Files Have Appropriate Permissionsmariadb · Level 1 | mariadb | High | 1 | Automated |
| TMA-MARIADB-3.8 | Ensure Plugin Directory Has Appropriate Permissionsmariadb · Level 1 | mariadb | High | 1 | Automated |
| TMA-MARIADB-3.10 | Ensure File Key Management Encryption Plugin files have appropriate permissionsmariadb · Level 1 | mariadb | High | 1 | Automated |
| TMA-MARIADB-4.1 | Ensure the Latest Security Patches are Appliedmariadb · Level 1 | mariadb | High | 1 | Manual review |
| TMA-MARIADB-5.1 | Ensure Only Administrative Users Have Full Database Accessmariadb · Level 1 | mariadb | High | 1 | Manual review |
| TMA-MARIADB-5.2 | Ensure 'FILE' is Not Granted to Non-Administrative Usersmariadb · Level 1 | mariadb | High | 1 | Manual review |
| TMA-MARIADB-5.4 | Ensure 'SUPER' is Not Granted to Non-Administrative Usersmariadb · Level 1 | mariadb | High | 1 | Manual review |
| TMA-MARIADB-5.6 | Ensure 'CREATE USER' is Not Granted to Non-Administrative Usersmariadb · Level 1 | mariadb | High | 1 | Manual review |
| TMA-MARIADB-5.7 | Ensure 'GRANT OPTION' is Not Granted to Non-Administrative Usersmariadb · Level 1 | mariadb | High | 1 | Manual review |
| TMA-MARIADB-6.4 | Ensure Audit Logging Is Enabledmariadb · Level 2 | mariadb | High | 2 | Automated |
| TMA-MARIADB-7.1 | Disable use of the mysql_old_password pluginmariadb · Level 1 | mariadb | High | 1 | Automated |
| TMA-MARIADB-7.2 | Ensure Passwords are Not Stored in the Global Configurationmariadb · Level 1 | mariadb | High | 1 | Automated |
| TMA-MARIADB-7.4 | Ensure Password Complexity Policies are in Placemariadb · Level 1 | mariadb | High | 1 | Automated |
| TMA-MARIADB-7.6 | Ensure No Anonymous Accounts Existmariadb · Level 1 | mariadb | High | 1 | Automated |
| TMA-MARIADB-8.1 | Ensure 'require_secure_transport' is Set to 'ON' and 'have_ssl' is Set to 'YES'mariadb · Level 1 | mariadb | High | 1 | Automated |
| TMA-MARIADB-8.2 | Ensure 'ssl_type' is Set to 'ANY', 'X509', or 'SPECIFIED' for All Remote Usersmariadb · Level 1 | mariadb | High | 1 | Automated |
| TMA-MARIADB-9.1 | Ensure Replication Traffic is Securedmariadb · Level 1 | mariadb | High | 1 | Manual review |
| TMA-MARIADB-9.2 | Ensure 'MASTER_SSL_VERIFY_SERVER_CERT' is enabledmariadb · Level 1 | mariadb | High | 1 | Automated |
| TMA-MARIADB-9.3 | Ensure 'super_priv' is Not Set to 'Y' for Replication Usersmariadb · Level 1 | mariadb | High | 1 | Automated |
| TMA-MARIADB-9.5 | Ensure mutual TLS is enabledmariadb · Level 1 | mariadb | High | 1 | Manual review |